Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-97100

Adding new content with widget portlet topper redirects to forbidden site

    Details

      Description

      Steps to reproduce:

      1. Add a widget page with a web content display widget
      2. Add a new basic web content via the portlet topper of the widget

      Expected result:

      After creating basic web content you are redirected back to page

      Actual result:

      Redirected to forbidden site that says

      "You do not have permission to access the requested resource http://localhost:8080/c/portal/update_layout"

      Error in console:

      2019-06-19 23:31:29.532 ERROR [http-nio-8080-exec-4][JSONAction:89] User 20129 did not provide a valid CSRF token for com.liferay.portal.action.UpdateLayoutAction

      Note:

      This only happens after adding a widget to the page and then immediately adding the content. If you already have the widget or if you add the widget, refresh the page, and then add the content it will not happen. Was able to reproduce with asset publisher widget, documents and media widget, and navigation menu widget.

      Reproduced on:

      Tomcat 9.0.17 + MySQL 5.7.

      Portal Master GIT Commit: 8e6e71f36a1b775df9919a12aa4b6064db187c78

        Attachments

          Issue Links

            Activity

              People

              • Votes:
                0 Vote for this issue
                Watchers:
                3 Start watching this issue

                Dates

                • Created:
                  Updated:
                  Resolved:
                  Days since last comment:
                  8 weeks, 5 days ago

                  Packages

                  Version Package
                  7.2.X
                  Master