Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-49592

Results in Search portlet contain Categories even when user doesn't have view permission for them

    Details

      Description

      Steps to reproduce:

      1. Create a category with "Viewable by Owner" permissions (remove any other permissions)
      2. Create a document and add the category to it
      3. Add a Search portlet to a page
      4. Create a new user
      5. Log in with this user, and search for your document in the Search portlet

      Actual Result: In the search results you will see the document AND the related Category, even though you don't have view permissions for it. The user can even use this Category as a search filter.
      Expected Result: Search portlet shouldn't show Categories that the user doesn't have permissions.

      Reproduced on master - c078a28

        Attachments

        1. fixed.png
          fixed.png
          15 kB
        2. fixed2.png
          fixed2.png
          24 kB
        3. fixed3.png
          fixed3.png
          22 kB
        4. reproduced.png
          reproduced.png
          13 kB

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  4 years, 35 weeks, 6 days ago