Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-95721

When Sharing is disabled, users can access documents they do not have permissions

    Details

    • Type: Bug
    • Status: Closed
    • Resolution: Fixed
    • Affects Version/s: Master
    • Fix Version/s: 7.2.X, Master
    • Component/s: Sharing
    • Labels:
      None

      Description

      Test: Enable/Disable on a private site
      Preconditions:

      1. Private Site with a page
      2. Document1 is uploaded to DM on Private Site
      3. AdminUser is a member of Private Site
      4. BasicUser is not a member of Private Site

      Steps:

      1. AdminUser shares Document1 with BasicUser and gives Update permissions
         AdminUser has visibility on the collaborators of Document1
         BasicUser is able to edit Document1
      2. Disable sharing for Private Site (Current behavior)
        AdminUser still has visibility over shared documents via Shared Content panel 
         While on the private site (Sharing is disabled), AdminUser can still share a previously shared document via Shared Content > Shared by Me
         BasicUser can view Document1 and all new edits on the document, for example when the file is renamed to "Confidential"; 
         Since BasicUser was initially given Update permissions, the Edit option is available but editing the document shows error: You do not have the required permissions.

       

      Expected behavior:

      1.- If "sharing" is disabled globally, the "Shared Content" option will not be available at all.

      2.- If "sharing" is enabled globally but some sites have it disabled, for the items of those sites, we'll show them in a disabled status and we'll hide the actions, not allowing to manage collaborators, share with others, edit, etc.

       

        Attachments

          Issue Links

            Activity

              People

              • Assignee:
                patricia.perez Patricia Perez
                Reporter:
                pablo.agulla Pablo Agulla
                Participants of an Issue:
                Recent user:
                Tomas Polesovsky (topolik)
              • Votes:
                0 Vote for this issue
                Watchers:
                1 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  27 weeks, 2 days ago

                  Packages

                  Version Package
                  7.2.X
                  Master