New User that isn't a member of Liferay Site can modify Search portlet settings

• Type: Bug
• Status: Closed
• Resolution: Reorganized
• Affects Version/s: 7.0.0 M7, 7.0.0 Alpha 1, 7.0.0 Alpha 2
• Fix Version/s: 7.0.0 Alpha 2
• Component/s: Application Security > Permissions, Security Vulnerability, User Management, User Management > Users & Organizations, ~ [Archived] Frontend Infrastructure
• Labels:
  • EXP7
• Fix Priority: 4

Steps to reproduce:

1. On the Search portlet, click cog > Configuration
2. Change the portlet name to "Searching" > Save
3. Refresh the page

Expected result:
1) User can't access elements on the Liferay Site; 2) No JavaScript errors will get thrown in the browser.

Actual result:
User can change the settings for the Search portlet on the Welcome page. And after saving, a TypeError: e is undefined is thrown. Then refreshing again will throw TypeError: Liferay.ControlMenu is undefined and TypeError: e.ButtonCore is undefined