-
Type:
Bug
-
Status: Closed
-
Resolution: Fixed
-
Affects Version/s: 7.0.0 DXP GA1, 7.0.X, Master
-
Fix Version/s: 7.0.0 DXP FP35, 7.0.0 DXP SP7, 7.0.5 CE GA6, 7.0.X, 7.1.0 M1, 7.1.X, Master
-
Component/s: Core Infrastructure
-
Branch Version/s:7.0.x
-
Backported to Branch:Committed
-
Story Points:1
-
Fix Priority:3
-
Git Pull Request:
There is a warning trace in SecurityPortletContainerWrapper.serveResource that hasn't enough detail
Warning traces in SecurityPortletContainerWrapper were improved in LPS-55303 (more info see pr https://github.com/brianchandotcom/liferay-portal/pull/26109) but warning trace in serveResource method was not modified:
- Current trace: Reject serveResource for ... on ...
- Desired trace: User %s is not allowed to serveResource for % on %
Steps to reproduce
- Create an empty page
- Query database and retrieve its plid using following query:
select plid, friendlyurl from Layout - Open following URL in a browser, replacing {PLID} parameter with the plid of created page:
http://localhost:8080/c/portal/layout?p_l_id={PLID}&p_p_cacheability=cacheLevelPage&p_p_id=com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla&p_p_lifecycle=2&p_p_resource_id=currentTime
- A warning trace with a stacktrace is written to log:
- Wrong behavior: Warning trace is wrong
Reject serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla - Expected behavior: Warning trace is right
User 99999 is not allowed to serveResource for /c/portal/layout on com_liferay_calendar_web_portlet_CalendarPortlet_INSTANCE_blablabla
- Wrong behavior: Warning trace is wrong