PUBLIC - Liferay Portal Community Edition
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-651

Journal - Edit article : a user with "Add article" permission cannot update his articles after save

    Details

    • Type: Bug Bug
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: 5.1.2
    • Fix Version/s: 5.2.0
    • Component/s: None
    • Labels:
      None
    • Environment:
      Liferay 5.1.2 Tomcat 5.5 Windows.
    • Similar Issues:
      Show 5 results 

      Description

      A user has "Add article" permission. (not approve permission)
      The user can add an article and save it.
      After 1st "save" or "save and continue", the user cannot update his article. He should be able to do that.
      Update permission cannot be set at the same level as we set the "add article" permission, which result in inconsistency, and make journal unusable.

      Here is my proposed fix, which is "quick&dirty", i.e. I do not know if it should be applied on other pages/portlets. I think there is no or very limited impact (regression tests).

      File: "edit_article.jsp" in "./html/portlet/journal"

      <%
      boolean hasSavePermission = false;

      if (article != null)

      { hasSavePermission = JournalArticlePermission.contains(permissionChecker, groupId, articleId, ActionKeys.UPDATE) || article.getUserId() == permissionChecker.getUserId(); }

      else

      { hasSavePermission = PortletPermissionUtil.contains(permissionChecker, plid, PortletKeys.JOURNAL, ActionKeys.ADD_ARTICLE); }

      %>

      I added a condition to test the article ownership.
      Hope this helps.

      Regards
      Hervé

        Activity

        Hide
        Chris Whittle added a comment -

        Amos, Is there a fix on users not able to change the permissions on Journals they own? I'm not sure this is related or if I need to open another problem record? If a non-admin user tries to change the permissions on their content it gives them "You do not have the required permissions. "

        Show
        Chris Whittle added a comment - Amos, Is there a fix on users not able to change the permissions on Journals they own? I'm not sure this is related or if I need to open another problem record? If a non-admin user tries to change the permissions on their content it gives them "You do not have the required permissions. "
        Hide
        Amos Fong added a comment -

        Hm...LPS-1543 was done to fix it, but it may be incomplete?

        Show
        Amos Fong added a comment - Hm... LPS-1543 was done to fix it, but it may be incomplete?
        Hide
        Amos Fong added a comment -

        Yea so it looks like it only fixes the top level entities like folders and not the actual entries...I suppose as a patch you can just add more if statements for everything

        Show
        Amos Fong added a comment - Yea so it looks like it only fixes the top level entities like folders and not the actual entries...I suppose as a patch you can just add more if statements for everything
        Hide
        Chris Whittle added a comment -

        I'm looking at 5.12 (possibly 5.13) so the fix looks to be for 5.2 do you know if it was backported to 5.1.3?

        Show
        Chris Whittle added a comment - I'm looking at 5.12 (possibly 5.13) so the fix looks to be for 5.2 do you know if it was backported to 5.1.3?
        Hide
        Amos Fong added a comment -

        Doesn't look like it. You can tell by looking in Fisheye, it will show 5.1.x if it was backported.

        Show
        Amos Fong added a comment - Doesn't look like it. You can tell by looking in Fisheye, it will show 5.1.x if it was backported.

          People

          • Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

            • Created:
              Updated:
              Resolved:
              Days since last comment:
              6 years, 10 weeks, 4 days ago

              Development

                Structure Helper Panel