Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-50332

Asset publicher subcription email doesn't check permissions

    Details

    • OS:
      Red Hat Enterprise 6
    • JDK:
      Oracle OpenJDK 6

      Description

      The variable [$ASSET_ENTRIES$] in the subscription email of the asset publisher is not filtered by permissions.

      1. Create a asset publisher displaying the documents.
      2. In the document library add a file and give the permissions to this file to a particular site's team
      3. With a site member not in this team subscribe to the asset publisher by email.
      4. The user receive an email tell him a news asset ahve been created and he seen the file for which he doen't have the right.

      In the asset publisher the file is not displayed, but in email it's in the asset list.

        Attachments

          Activity

            People

            Assignee:
            lu.liu Lu Liu
            Reporter:
            guillaumec Guillaume Côté
            Participants of an Issue:
            Recent user:
            Marta Elicegui
            Votes:
            1 Vote for this issue
            Watchers:
            2 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              5 years, 17 weeks, 3 days ago

                Packages

                Version Package