Guest User can use search portlet to find any user in the directory

• Type: Bug
• Status: Closed
• Resolution: Fixed
• Affects Version/s: 5.2.3, 6.0.0 Preview, 6.0.1 RC
• Fix Version/s: 6.0.1 RC, 6.0.2 RC
• Component/s: Directory, Social Networking, Web Search > Search Widgets
• Labels: None
• Branch Version/s:
  5.2.x
• Backported to Branch:
  Committed

Basically, if the search portlet is available to the Guest user, anybody can search for users in the directory.

To replicate:

1. Login as admin and add a search portlet.
2. Logout.
3. Click the search icon with nothing in the search field. All users should show up.
4. Click the search icon with "liferay.com" in the search field. All liferay.com users should show up.