Affects Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2, 6.2.0 CE M2
Environment:HideLiferay Version: 6.1 GA 1
Operating System: Windows XP
Application Server: Tomcat 7.0.x
Java Virtual Machine: Java 6
Database: Oracle 11g
ShowLiferay Version: 6.1 GA 1 Operating System: Windows XP Application Server: Tomcat 7.0.x Java Virtual Machine: Java 6 Database: Oracle 11g http://www.liferay.com/group/customer/support/-/support/ticket/AONHEWITT-42
Backported to Branch:Committed
Similar Issues:Show 4 results
LPS-32514 Search portlet results are displaying for guest even without guest view permissions. LPS-26318 Web Content Display portlet is not visible to guest even with guest view permission. LPS-26001 Web Content Permissions are ignored in search result list LPS-23069 Search Portlet - search ignores guest-view permission
Search results display for guests even though guest view permissions are disabled.
Steps to reproduce:
1. Add Search Portlet
2. Create Web content
3. Remove guest "view" permissions
6. Search for web content
Content will display in asset publisher when it's not supposed to. and you can also click on the link, which leads you to an empty asset publisher.
See steps in video
Search should not produce results, and no link should be available.