User receives notifications from documents inside a folder where there is no VIEW permission

• Type: Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 6.2.X EE
• Fix Version/s: None
• Component/s: Collaboration, Collaboration > API > Notifications
• Labels:
  • ee-6.2.x-only
  • ee-ts
• Fix Priority: 3
• Git Pull Request: https://github.com/brianchandotcom/liferay-plugins-ee/pull/20705

Reproductions steps:
1) Deploy the latest Notifications portlet
2) Place a DM portlet on the Welcome page
3) Create a user with no roles and assign it to the default site
4) Login as the new user user and subscribe to the Documents and Media portlet added to the Welcome page
5) Login as admin
6) Create a folder in the Documents and Media portlet i.e. secretfolder
7) Remove all VIEW permissions except for Owner itself
8) Upload a document in secretfolder
9) Then login with the new user and assert that the secretfolder is not visible

Expected result: The user is not to be notified about the document upload
Actual result: A notification appears: ... added a new Document...