Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-73741

"View Event Details" permission allows users to see unapproved calendar entries

    Details

      Description

      Environment

      • DXP + de-13
      • DXP + de-23
      • REPRODUCED on 7.0.x c91652051b63c249825a2754e4a54a419dba5b28 - Mon Jul 17 19:36:07 2017 -0700
      • REPRODUCED on Master 02a5802cdbf4bd383b3aae71f3752d6ebb5b84e2 - Mon Jul 17 19:46:29 2017 -0700

      Steps

      1. Launch a clean bundle;
      2. Log with test@liferay.com;
      3. Create a user test2@liferay.com;
      4. Make test2@liferay.com a member of the default site;
      5. Configure the default site to use Single Approver (Version 1) for Calendar Event;
      6. Add a Calendar Portlet to the page;
      7. Add an event called "Unapproved" to the site's calendar;
      8. Logout and login in as test2@liferay.com;
      9. Check the calendar entries.

      Expected Results

      Event Unapproved should not be visible by test2@liferay.com, because Workflow for calendar events is enabled and it was not approved after being created.

      Actual Results

      Event Unapproved is visible by test2@liferay.com and any site member.

      Additional Remarks

      The issue is related with the "View Event Details" permission. If it's given to Guest, the same happens to users not logged in. The Site Members have the View Event Details by default.

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                2 years, 10 weeks, 4 days ago

                Packages

                Version Package
                7.0.0 DXP FP30
                7.0.X EE
                7.0.4 CE GA5
                7.1.X
                Master