User who doesn't have the "view" permission can also display the contents by copying / pasting the search result URL

• Type: Bug
• Status: Closed
• Resolution: Won't Fix
• Affects Version/s: 7.0.0 DXP SP3, 7.0.0 DXP FP25, 7.0.X EE, Master
• Fix Version/s: None
• Component/s: Application Security > Permissions, Web Search > Search Widgets
• Labels: None
• Fix Priority: 3

Reproduce steps:

1. Start Liferay
2. Login as default admin user([e-mail])
3. Create a Web Content named "Sample"
4. Change the permission as followings.
      Guest: Uncheck all permissions
      Owner: Grant all permissions
      Site Member: grant "view" permission only
5. Search "Sample" in search portlet
6. Click on the search result
7. Copy the URL
8. Open another browser and paste the URL

Actual result:
The web content article is STILL displayed even if guest user doesn't have the view permission.

Expected result:
The web content article CAN NOT be displayed unless guest user has the view permission.