Affects Version/s: 7.0.0 DXP FP11, 7.0.0 DXP SP2, Master
Component/s: My Account
In tailoring Liferay for specific business requirements, Liferay's role permission definition allows you to grant/deny access to specific parts of the Control Panel. Even though the User role's permission to Access in My Account was disabled (by default OOTB), My Account still remains in a user's Product Menu.
This affects My Account, Account Settings, My Workflow Tasks, Notifications, My Submissions and My Organizations. We will use My Account as an example in the steps to reproduce, but I wanted to list out the aforementioned components so that we will take these into consideration as well.
Steps to reproduce
- Start DXP SP1 + FP11
- Sign In with "firstname.lastname@example.org"
- Add a user
- Navigate to Product Menu > Users > Roles
- Click on User's Define Permissions
- Click on Sidebar > User > My Account
- Note that all checkboxes are unchecked
Access in My Account
- Sign Out
- Sign In with the user created at step 3
- See Product Menu
My Account remains in Product Menu in spite of User role does not have Access in My Account permission.
If permissions for accessing My Account, Account Settings, My Workflow Tasks, Notifications, My Submissions, and My Organizations are disabled, then these permissions should be reflected in the UI.
DXP SP1 + FP11