Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-54311

Structure visible in the Add Content drop-down, even if user has no permissions for that structure

    Details

      Description

      1. Create a regular role, define the following permissions
      "Site Administration" > "Content" > "Web content" > "General Permissions"
      "Access in Site Administration"
      "View"

      2 Create a Web Content Structure
      3. Add a folder and open its permissions window. For role created at step 1, tick Add Web Content.
      4. Create a user and assign him the role
      5. Login with this user.
      6. Go to Admin/Content/Web Content/ folder F1.
      7. Click on "Add" link

      Result:
      In the drop-down, the user is able to see the structure but when he clicks on it, a message is displayed saying that the user does not have the permissions.

      Expected:
      The user shouldn't see the created structure, as he doesn't have View permission on it.

        Attachments

        1. fixed.png
          fixed.png
          15 kB
        2. reproduced.png
          reproduced.png
          18 kB

          Issue Links

            Activity

              People

              • Assignee:
                beck.liu Beck Liu
                Reporter:
                tamas.molnar Tamas Molnar
                Participants of an Issue:
                Recent user:
                Esther Sanz
              • Votes:
                0 Vote for this issue
                Watchers:
                0 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  4 years, 44 weeks, 1 day ago

                  Packages

                  Version Package
                  6.2.3 CE GA4
                  6.2.X EE