Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-58055

User without permission to view asset can still search asset

    Details

      Description

      User without permissions to view specified assets are still able to search assets.

      Reproduce with the following steps:

      1. Add Data Definition with Text field
      2. Add DDL List with added Data Definition > Set Permissions viewable by Site Members
      3. Add DDL List Record
      4. Go to Home page > Search DDL List Record
      5. Assert search result for DDL List Record is found
      6. Sign out
      7. Search DDL List Record as Guest

      Expected result:
      Guests should not be able to see the DDL List Record search result.

      Actual result:
      Guest is able to see search result.

      Reproduced on:
      Tomcat 7.0.62 + MYSQL 5.5.21
      Portal master GIT ID bc9fca051e94ceaa44f01df149eede756e318b9b

        Attachments

          Issue Links

            Activity

              People

              Assignee:
              clarissa.velazquez Clarissa Velazquez
              Reporter:
              clarissa.velazquez Clarissa Velazquez
              Participants of an Issue:
              Recent user:
              Brian Wulbern
              Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:
                Days since last comment:
                5 years, 7 weeks, 6 days ago

                  Packages

                  Version Package
                  6.2.X EE
                  7.0.0 Alpha 1
                  Master