Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-64902

The user can see the folder even doesn't have view permission

    Details

    • Story Points:
      1
    • Fix Priority:
      4

      Description

      Steps to reproduce

      1. Add a regular role and add Access in Site Administration under Documents and Media
        • The role has the following permission:
          Documents and Media: Access in Site Administration
          Documents and Media > Documents: View
          Sites > Site: Go to Site Administration
      2. Add a user and assign the new role to the user(just only have this role)
      3. Go to Document and Media and add a folder, assert the new role view doesn't check
      4. Login as the new user and assert the folder display

      Expected Result
      The folder doesn't display due to the new user doesn't have the view permission.

      Actual Result
      The folder displays, I also try to delete the Documents and Media > Documents: View, but the folder still displays.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                2 years, 3 weeks, 6 days ago

                Packages

                Version Package