Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-48131

UserGroup model missing VIEW_MEMBERS permission

    Details

      Description

      Steps to reproduce

      1. Login as admin
      2. Go to Control Panel -> Roles
      3. Create a custom role named User Group Viewer
      4. Define Permissions on the new role
        • Portal - General
          • Add - Go to Control Panel
        • Portal - Users and Organizations - User
          • Add - View
        • Portal - Users and Organizations - User Groups
          • Add - Assign Members
          • Add - View
        • Control Panel:Portal - User Groups
          • Add - Access in Control Panel
          • Add - View
          • Note that View Members is not an option though it should be added (this should exist after the fix)
      5. Add a User Group "Test User Group" with at least one user.
      6. Create a new user and assign the User Group Viewer role to them.
      7. Login as the new user
      8. Go to Control Panel -> User Groups
      9. Verify that the user can see the list of Users in the "Test User Group" and manage them.
      10. Now, go to the corresponding User Group JSON API - http://localhost:8080/api/jsonws?signature=/user/get-user-group-users-1-userGroupId.
      11. Supply the userGroupId (discovering by viewing the User Group and examining the HTML form, or by doing an SQL query).
      12. Click Invoke.

      Result
      EXPECTED: The list of users assigned to the User Group should be displayed.
      ACTUAL: PrincipalException is thrown.

        Attachments

        1. fixed_1.png
          fixed_1.png
          14 kB
        2. fixed_2.png
          fixed_2.png
          16 kB
        3. reproduced.png
          reproduced.png
          15 kB

          Issue Links

            Activity

              People

              Assignee:
              yvonne.han Yvonne Han
              Reporter:
              preston.crary Preston Crary
              Participants of an Issue:
              Recent user:
              Brian Wulbern
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 6 weeks, 5 days ago

                  Packages

                  Version Package
                  6.2.2 CE GA3
                  6.2.X EE
                  7.0.0 M2