-
Type:
Bug
-
Status: Closed
-
Resolution: Won't Fix
-
Affects Version/s: Master
-
Fix Version/s: None
-
Component/s: Application Security > Permissions
-
Labels:
-
Fix Priority:4
-
QA Test Name:
-
QA Test Score:4
Recycle bin button can be viewed to a user without permissions in the CPRolesPGDocumentsandmedia#DeleteDMFolderRegRoleInline testcase.
Steps to reproduce:
- Add a new user.
- Add a Regular role.
- Assign user to Regular role.
- Add a page with DM portlet.
- Create a folder name.
- Sign out of Test test.
- Sign in as new user.
- View page with DM porlet.
- Click on Checkbox.
Expected Result: Recycle bin button is not visible to user.
Actual Result: Recycle bin button is visible to user without permissions.
Reproduced on:
Tomcat 8.0.32 + MySQL 5.6.
Portal master GIT ID: 5ccaa639070b7750bd25b8936c612ba58a2520f8.