Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-81796

A User without the Permissions to Update/Configure Fragment Collections or Delete Them Should not be Given the Option to Import/Delete Them

    Details

      Description

      Description
      The Kebab Menu with Option to Import new Collections and Deleting Collections is available for users without the permissions to configure/update them. The Export option makes sense, since the user should be able to export them since they can view them anyways, but importing fragments is essentially both and Add and an Update action (depending on flag set), and Deleting a Collection is a Delete action. These are not actually permitted, but they should be hidden to prevent user confusion

      Steps to Reproduce

      1. Create a Fragment Collection and Fragment
      2. Give User the Permissions shown in screenshot
      3. Login as the User
      4. Navigate to Site Admin > Build > Page Fragments
      5. Try to Import/Delete Collections

      Expected Result
      Option not Visible

      Actual Result
      Option Visible, but not permitted

      Reproduced on:
      Tomcat 9.0.6 + MySQL 5.7
      Portal master GIT ID: edb9113582bde43daefaff1c95c87cabeec94582

        Attachments

          Activity

            People

            • Assignee:
              kyle.miho Kyle Miho
              Reporter:
              kyle.miho Kyle Miho
              Participants of an Issue:
              Recent user:
              Jason Pince
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                2 years, 10 weeks, 3 days ago

                Packages

                Version Package
                7.1.0 Beta 3
                7.1.X
                Master