Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-76514

Warning trace in SecurityPortletContainerWrapper.serveResource doesn't have enough detail

    Details

      Description

      There is a warning trace in SecurityPortletContainerWrapper.serveResource that hasn't enough detail

      Warning traces in SecurityPortletContainerWrapper were improved in LPS-55303 (more info see pr https://github.com/brianchandotcom/liferay-portal/pull/26109) but warning trace in serveResource method was not modified:

      • Current trace: Reject serveResource for ... on ...
      • Desired trace: User %s is not allowed to serveResource for % on %

      Steps to reproduce

      1. Create an empty page
      2. Query database and retrieve its plid using following query:
        select plid, friendlyurl from Layout
      3. Open following URL in a browser, replacing {PLID} parameter with the plid of created page:
        http://localhost:8080/c/portal/layout?p_l_id={PLID}&p_p_cacheability=cacheLevelPage&p_p_id=com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla&p_p_lifecycle=2&p_p_resource_id=currentTime
        
      4. A warning trace with a stacktrace is written to log:
        • Wrong behavior: Warning trace is wrong
          Reject serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla
        • Expected behavior: Warning trace is right
          User 99999 is not allowed to serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla

        Attachments

          Activity

            People

            Assignee:
            sharry.shi Sharry Shi
            Reporter:
            jorge.diaz Jorge Diaz
            Participants of an Issue:
            Recent user:
            Csaba Turcsan
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

              Dates

              Created:
              Updated:
              Resolved:
              Days since last comment:
              3 years, 7 weeks, 6 days ago

                Packages

                Version Package
                7.0.0 DXP FP35
                7.0.0 DXP SP7
                7.0.5 CE GA6
                7.0.X
                7.1.0 M1
                7.1.X
                Master