User can add webcontent subfolder without permission

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 7.0.X EE, Master
• Fix Version/s: None
• Component/s: Application Security > Permissions, Web Content > Web Content Administration
• Labels: None
• Fix Priority: 3
• Git Pull Request: https://github.com/liferay/com-liferay-journal/pull/370

Step to reproduce:

1. Create a regular role, then define the permission (Site Administration > Content > Web Content).
   General Permissions > Access in Site Administration
   General Permissions > View
   Resource Permissions > Web Content > Add Folder
   Resource Permissions > Web Content > View
2. Create a user, and assign the role.
3. Login as the newly created user, and create a folder.
4. Try to create a subfolder.

Expected result:
User can not add the subfolder (the role does not have the permission: Resource Permissions > Web Content Folder> Add Subfolder).

Actual result:
User can add the subfolder.

Note:
As a workaround, we can check the permission of the created folder, the regular role does not have permission to create a subfolder.