Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-76514

Warning trace in SecurityPortletContainerWrapper.serveResource doesn't have enough detail

    Details

      Description

      There is a warning trace in SecurityPortletContainerWrapper.serveResource that hasn't enough detail

      Warning traces in SecurityPortletContainerWrapper were improved in LPS-55303 (more info see pr https://github.com/brianchandotcom/liferay-portal/pull/26109) but warning trace in serveResource method was not modified:

      • Current trace: Reject serveResource for ... on ...
      • Desired trace: User %s is not allowed to serveResource for % on %

      Steps to reproduce

      1. Create an empty page
      2. Query database and retrieve its plid using following query:
        select plid, friendlyurl from Layout
      3. Open following URL in a browser, replacing {PLID} parameter with the plid of created page:
        http://localhost:8080/c/portal/layout?p_l_id={PLID}&p_p_cacheability=cacheLevelPage&p_p_id=com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla&p_p_lifecycle=2&p_p_resource_id=currentTime
        
      4. A warning trace with a stacktrace is written to log:
        • Wrong behavior: Warning trace is wrong
          Reject serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla
        • Expected behavior: Warning trace is right
          User 99999 is not allowed to serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla

        Attachments

          Activity

            People

            • Assignee:
              sharry.shi Sharry Shi
              Reporter:
              jorge.diaz Jorge Diaz
              Participants of an Issue:
              Recent user:
              Csaba Turcsan
            • Votes:
              0 Vote for this issue
              Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                1 year, 46 weeks ago

                Packages

                Version Package
                7.0.0 DXP FP35
                7.0.0 DXP SP7
                7.0.5 CE GA6
                7.0.X
                7.1.0 M1
                7.1.X
                Master