Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-67498

Guests have an option to leave a comment in Microblogs

    Details

      Description

      Steps to reproduce

      1. Add Microblogs portlet to page
      2. Add a new Microblogs post
      3. Update status
      4. Logout and view Microblogs portlet as guest
      5. Attempt to leave a comment
      6. Assert nothing happens

      Expected result: Leave a comment should not be visible to guests and other users that do not have the permissions to add a comment
      Actual result: Leave a comment option is present to all users regardless of their role

      In 6.2, guests are not able to add a comment in Microblogs. Members and authenticated users are the ones allowed to leave comments. The default.xml for resource-action in 6.2 is as follows:

      <model-resource>
      		<model-name>com.liferay.microblogs</model-name>
      		<portlet-ref>
      			<portlet-name>1</portlet-name>
      			<portlet-name>2</portlet-name>
      		</portlet-ref>
      		<permissions>
      			<supports>
      				<action-key>ADD_ENTRY</action-key>
      				<action-key>PERMISSIONS</action-key>
      			</supports>
      			<site-member-defaults>
      				<action-key>ADD_ENTRY</action-key>
      			</site-member-defaults>
      			<guest-defaults />
      			<guest-unsupported>
      				<action-key>ADD_ENTRY</action-key>
      				<action-key>PERMISSIONS</action-key>
      			</guest-unsupported>
      		</permissions>
      	</model-resource>
      

      Reproduced on:
      Tomcat 8.0.32 + MySQL 5.6
      Portal master GIT ID: a5abb03efe1e877c6ccd3415e6f0911dff6102d4
      Portal ee-7.0.x GIT ID: 7606d95aea3aa1170fe509cd4d5966d93681a059
      Liferay Portal GA3

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                3 years, 21 weeks, 4 days ago

                Packages

                Version Package
                7.0.0 DXP FP8
                7.0.0 DXP SP2
                7.0.3 CE GA4
                7.1.X
                Master