Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-52664

Roles admin shows Roles to users without view permission

    Details

      Description

      Steps
      1. Log in as admin
      2. Add a Regular Role -> "Role Manager"
      3. Define Permissions on Role Manager
      4. Control Panel -> Users -> Roles check Access in Control Panel and save
      5. Organization Owner > Permissions > Check view for Role Manager
      6. Add another Regular Role -> "Secret Role"
      7. Click Permissions on the Secret Role
      8. Verify that the Role Manager does not have View permission on the role
      9. Add a new User with the Role Manager Role
      10. Log in as the new user
      11. Go to Control Panel -> Users -> Roles

      Expected
      Secret role should not be displayed.
      Actual
      Secret role is displayed.

        Attachments

        1. failed.png
          failed.png
          49 kB
        2. reproduced.png
          reproduced.png
          63 kB

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  2 years, 48 weeks ago

                  Packages

                  Version Package
                  6.2.X EE
                  7.0.0 M4