Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-73890

User who doesn't have the "view" permission can also display the contents by copying / pasting the search result URL

    Details

    • Fix Priority:
      3

      Description

      Reproduce steps:

      1. Start Liferay
      2. Login as default admin user(test@liferay.com)
      3. Create a Web Content named "Sample"
      4. Change the permission as followings.
           Guest: Uncheck all permissions
           Owner: Grant all permissions
           Site Member: grant "view" permission only
      5. Search "Sample" in search portlet
      6. Click on the search result
      7. Copy the URL
      8. Open another browser and paste the URL

      Actual result:
      The web content article is STILL displayed even if guest user doesn't have the view permission.

      Expected result:
      The web content article CAN NOT be displayed unless guest user has the view permission.

        Attachments

          Activity

            People

            Assignee:
            support-lep@liferay.com SE Support
            Reporter:
            alan.huang Alan Huang
            Participants of an Issue:
            Recent user:
            Alan Huang
            Votes:
            0 Vote for this issue
            Watchers:
            0 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              3 years, 25 weeks, 1 day ago

                Packages

                Version Package