User with no permission could see the WC in WCD

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 6.2.X EE, 7.0.0 DXP SP2, Master
• Fix Version/s: None
• Component/s: Application Security > Permissions, Web Content > Web Content Administration
• Labels:
  • QA-M
• Fix Priority: 4
• QA Test Name:
  • 6.2_-_LP_-_Web_Content_-_Web_Content_Administration_-_Permissions_-_Guest_View
• QA Test Score: 5

Steps to reproduce:

1. Start portal and login.
2. Add a WC with any content, in permission settings tab, uncheck the "view" permission for guest user.
3. Go to liferay home page, add WCD, choose to display the new created WC in WCD configuration.
4. Check the permission settings for WCD portlet, asset "view" permission is checked for guest user.
5. Logout.

Expected result:
User could not see WC, but could see WCD (because guest user does not have "view" permission to see WC, but has "view" permission for the WCD portlet).

Actual result:
User could see WC displayed in WCD.