DM notification sends to user who does not have permissions

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 6.2.X EE
• Fix Version/s: 6.2.X EE
• Component/s: User Notifications
• Labels:
  • ee-ts
• Branch Version/s:
  6.2.x
• Backported to Branch:
  Committed
• Fix Priority: 4
• Git Pull Request: https://github.com/brianchandotcom/liferay-plugins-ee/pull/22500

0. Deploy notification portlet to 6.2
1. Create two users A and B
2. In default site, create two site teams TA and TB
3. In DM, create two folders FA and FB
4. Give permissions of FA ONLY to the owner and team TA
5. Give permissions of FB ONLY to the owner and team TB
6. Assign user A to TA
7. Assign user B to TB
8. Sign in as user A and create a document in FA
9. Sign in as user B

Expected: user B shall not see a notification
Actual: user B has a notification

not reproduciable on master