-
Type:
Bug
-
Status: Closed
-
Resolution: Fixed
-
Affects Version/s: 7.0.0 DXP FP11, 7.0.0 DXP SP2, Master
-
Fix Version/s: 7.0.0 DXP FP14, 7.0.0 DXP SP3, 7.0.3 CE GA4, 7.0.X EE, 7.1.X, Master
-
Component/s: My Account
-
Branch Version/s:7.0.x
-
Backported to Branch:Committed
-
Fix Priority:4
-
Git Pull Request:
Summary
In tailoring Liferay for specific business requirements, Liferay's role permission definition allows you to grant/deny access to specific parts of the Control Panel. Even though the User role's permission to Access in My Account was disabled (by default OOTB), My Account still remains in a user's Product Menu.
This affects My Account, Account Settings, My Workflow Tasks, Notifications, My Submissions and My Organizations. We will use My Account as an example in the steps to reproduce, but I wanted to list out the aforementioned components so that we will take these into consideration as well.
Steps to reproduce
- Start DXP SP1 + FP11
- Sign In with "test@liferay.com"
- Add a user
- Navigate to Product Menu > Users > Roles
- Click on User's Define Permissions
- Click on Sidebar > User > My Account
- Note that all checkboxes are unchecked
Access in My Account
Configuration
Permissions
Preferences
View - Sign Out
- Sign In with the user created at step 3
- See Product Menu
Actual result
My Account remains in Product Menu in spite of User role does not have Access in My Account permission.
Expected result
If permissions for accessing My Account, Account Settings, My Workflow Tasks, Notifications, My Submissions, and My Organizations are disabled, then these permissions should be reflected in the UI.
Reproduced in
DXP SP1 + FP11
master (e330d7f03769a98f5b54f0e4c9db8f0d907fad7d)
ee-7.0.x (b1e26fbd26025fd155ff30781bf71d00865b48ba)