Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-91188

User with only view permissions can share asset for comments

    Details

    • Fix Priority:
      5

      Description

      Steps to reproduce:

      1. Add another user with no extra permissions
      2. Add a document
      3. Share this document to that user, choose View permissions
      4. Make sure Allow Sharing is enabled
      5. Login as user added in step 1
      6. Go to document
      7. Share this document

      Expected results: User can only share this document for Viewing, since it was shared to him for Viewing
      Actual results: User can also share this document for Comments

      Reproduced on:
      Tomcat 9.0.6 + MySQL 5.7
      Portal master GIT ID: 4cfb56d6c360fcd2ba186823838cba798ed7347a

        Attachments

          Activity

            People

            • Assignee:
              patricia.perez Patricia Perez
              Reporter:
              patricia.perez Patricia Perez
              Participants of an Issue:
              Recent user:
              Kristoffer Onias
            • Votes:
              0 Vote for this issue
              Watchers:
              0 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                32 weeks, 5 days ago

                Packages

                Version Package