User's content permissions do not change when parent organization is added or removed.

• Type: Bug
• Status: Verified
• Resolution: Unresolved
• Affects Version/s: 6.2.10 EE GA1, 7.0.0 DXP FP30, 7.0.X, Master
• Fix Version/s: None
• Component/s: Application Security > Permissions, User Management > Users & Organizations
• Labels:
  • ee-ts
  • liferay-beta-ce-710
• Fix Priority: 3
• Git Pull Request: https://github.com/Preston-Crary/liferay-portal/pull/581

Description

User scope/content permissions do not change when a parent organization is added or removed from an organization they are a member of.

 

Steps to Reproduce

1. Admin -> Control Panel -> Users & Organizations. Create two organizations ("Child" and "Parent").
2. Navigate to "Child" and add a user.
3. Create a private page for "Child".
4. Add an asset publisher to that private page.
5. Configuration -> Scope. Change the scope of the private page to both Child and Parent.
6. Add two articles, one within the scope of Child and the other within the scope of Parent. When adding the article for the "Parent" on DXP, check Visibility and set it to "Site Members" if it says "Guest".
7. Log-in or impersonate your user that belongs to "Child" and navigate to the private page-only the child scope article should be visible.
8. Return to Users & Organization, edit "Child" and add "Parent" as its parent organization.
9. Log-in or impersonate your user that belongs to "Child," return to your private page.

 

Expected Results:

Both the parent and child scope article should be visible.

 

Actual Results:

Only the child scope article is visible.