Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-79235

A role with only view permissions can access edit screen for forms

    Details

      Description

      Description

      A user with permissions to view forms in Site Administration is able to access the individual form's edit menu. However, the user is unable to save any updates. The client expects that the user is unable to access edit controls for the form unless those permissions are explicitly given.

      Steps to reproduce

      1) Create a new site role.
      2) Add one permission to the role: Site Administration->Content->Forms->Access in Site Administration under General Permissions.
      3) After saving you will notice the Summary of defined permissions is the following:

      Forms: Access in Site Administration
      Site Settings>Site: View Site Administration Menu

      4) Add a new user.
      5) Assign the user to the default site and assign the new role, as well.
      6) In Control Panel->Content->Forms create a new Test Form.
      7) Login to the site with User A and visit Control Panel->Content->Forms.
      8) Click on the title of the form.

      Results of Testing

      Expected Result: The edit controls should not be presented at all because the user does not have edit permissions.
      Actual Results: On the next screen all editing controls are displayed to the user. The user can add fields and change field settings. However, if they click Save at the bottom of the form it will fail with an error, Your request failed to complete.

      Errors/Logs

      No errors

      Master

      Reproduced
      63becb8353e57714bf179233e4b54ad73d6919b1

      Branch

      Reproduced
      5c8801af03be20d6102f8df3a1143ada72884e68

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                1 year, 30 weeks, 5 days ago

                Packages

                Version Package
                7.0.0 DXP FP46
                7.0.6 CE GA7
                7.0.0 DXP SP8
                7.0.X
                7.1.0 M2
                7.1.X
                Master