Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-54311

Structure visible in the Add Content drop-down, even if user has no permissions for that structure

    Details

      Description

      1. Create a regular role, define the following permissions
      "Site Administration" > "Content" > "Web content" > "General Permissions"
      "Access in Site Administration"
      "View"

      2 Create a Web Content Structure
      3. Add a folder and open its permissions window. For role created at step 1, tick Add Web Content.
      4. Create a user and assign him the role
      5. Login with this user.
      6. Go to Admin/Content/Web Content/ folder F1.
      7. Click on "Add" link

      Result:
      In the drop-down, the user is able to see the structure but when he clicks on it, a message is displayed saying that the user does not have the permissions.

      Expected:
      The user shouldn't see the created structure, as he doesn't have View permission on it.

        Attachments

        1. fixed.png
          fixed.png
          15 kB
        2. reproduced.png
          reproduced.png
          18 kB

          Issue Links

            Activity

              People

              Assignee:
              beck.liu Beck Liu
              Reporter:
              tamas.molnar Tamas Molnar
              Participants of an Issue:
              Recent user:
              Esther Sanz
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 28 weeks, 4 days ago

                  Packages

                  Version Package
                  6.2.3 CE GA4
                  6.2.X EE