Details
-
Bug
-
Status: Closed
-
Resolution: Fixed
-
7.0.0 DXP SP7, 7.0.0 DXP FP50, 7.0.X, 7.1.0 Beta 3, 7.1.X
-
7.2.x
-
Committed
-
1
-
3
-
Workflow_7.2_14, Workflow_7.2_13
Description
Prerequisites:
- Create new basic user
- Set User role permissions as in gif
Steps:
- As admin, navigate to Content -> Kaleo Forms Admin
- Create new Form
- View created Form
- Add new form, fill in some fields, save it
- Go back to Kaleo Forms Admin
- From action menu, select Permissions
- Set Permission for user to View Form (optionally also Delete, because it doesn't make any difference at all)
- Login as user, access Kaleo Forms Admin
- Select View from action menu of Form
- Select Delete from action menu of filled in specific form
2018-06-15 09:29:16.823 ERROR [http-nio-8080-exec-1][PortletServlet:112] javax.portlet.PortletException: com.liferay.portal.kernel.security.auth.PrincipalException$MustHavePermission: User 36215 must have DELETE permission for com.liferay.dynamic.data.lists.model.DDLRecordSet 36112 javax.portlet.PortletException: com.liferay.portal.kernel.security.auth.PrincipalException$MustHavePermission: User 36215 must have DELETE permission for com.liferay.dynamic.data.lists.model.DDLRecordSet 36112
Expected result: There is no option for user to delete filled in form / there is error message displayed / user can delete form
Actual result: Page is not displayed correctly, no error message, filled in form is not deleted
Reproducible:
- CentOS, MySQL 5.6, Tomcat 9.0.6, FF 60
- DXP 7.1-b3-20180611120257571
Fix priority: S3 + L3 = 3