Lack of view permissions for portlet can cause loss of permissions for site navigation

• Type: Regression Bug
• Status: Closed
• Resolution: No Longer Reproducible
• Affects Version/s: 7.2.0 GA1, 7.2.10 DXP GA1, 7.2.X, Master
• Fix Version/s: 7.2.X, Master
• Component/s: Application Security > Permissions, Performance
• Labels:
  • 7.2-known-issues
  • 7.2-should
  • QA-AUTOMATION
  • ee-ts
  • liferay-ga1-ce-720
• Fix Priority: 4
• QA Test Name:
  • LocalFile.Elasticsearch6EE#XPackSmokeTest
  • LocalFile.PortletsPermissionsUpgrade#ViewPortletsPermissionsAfterUpgrade621015
  • LocalFile.PortletsPermissionsUpgrade#ViewPortletsPermissionsAfterUpgrade621021
  • LocalFile.WebContentDisplay#UndeployWebContentDisplayModuleViaGogoShell
  • LocalFile.WebContentDisplay#ViewArticleWithGuestViewPermission
  • Manual_Environment_Application_Security
• QA Test Score: 29

Steps to Reproduce:

1. Add a new page
2. Add a portlet to the page (e.g. Calendar)
3. Set portlet permissions so that only the Owner can view
4. Copy page URL
5. Sign out
6. Navigate to page URL as a guest user

Expected Result:
Page Navigation and Search portlet still render.
Calendar Portlet does not render "You do not have the roles required to access this portlet."

Actual Result:
Page Navigation portlet and Search portlet, (and Calendar portlet) do not render with "You do not have the roles required to access this portlet."

Note This ONLY happens if all the portlets on the page do not have view permissions for the user.
Working correctly with an additional viewable portlet:

Caused by LPS-96289.

This also can affect a logged in user depending on the portlet permissions.