PUBLIC - Liferay Portal Community Edition

Users without permission can create folders/files in the root folder

Details

  • Branch Version/s:
    6.1.x
  • Backported to Branch:
    Committed
  • Story Points:
    2
  • Similar Issues:
    Show 4 results 

Description

1. Create a new user (e.g., user1). Make sure this user has the Power User role
2. Add a Documents and Media portlet to /web/guest/home
3. Add a folder (e.g., folder1)
4. For this new folder, give the Power User role permission to Add Subfolder permission
5. Login as user1

Observe that user1 has no permission to add folders to the root/home folder of the Documents and Media portlet

6. Click on folder1
7. Add a sub-folder (e.g., folder2)
8. Select the move option on folder2
9. Select the Home folder as the new parent folder.
10. Click the Move button.
11. Navigate to the root/home folder

Observe that folder1 and folder2 are now both in the root/home folder.

Same issue applies to moving a file

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Michael Saechang added a comment -

Committed on:
Portal 6.2.x GIT ID: 31b7cc2b6a53caaab0381e9633e6abc62bbc56fe.

Show
Michael Saechang added a comment - Committed on: Portal 6.2.x GIT ID: 31b7cc2b6a53caaab0381e9633e6abc62bbc56fe.
Hide
Permalink
Mark Jin added a comment -

PASSED Manual Testing following the steps in the description.

Reproduced on:
Tomcat 7.0 + MySQL 5. Portal 6.1.20 EE GA2.

Folder1 and folder2 are both in the root/home folder.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: 794d0a0ce0922f57f555e3817bee876db78e27b2.

Move subfolder to home folder cause "You do not have the required permissions.".

Show
Mark Jin added a comment - PASSED Manual Testing following the steps in the description. Reproduced on: Tomcat 7.0 + MySQL 5. Portal 6.1.20 EE GA2. Folder1 and folder2 are both in the root/home folder. Fixed on: Tomcat 7.0 + MySQL 5. Portal 6.2.x GIT ID: 794d0a0ce0922f57f555e3817bee876db78e27b2. Move subfolder to home folder cause "You do not have the required permissions.".
Hide
Permalink
Michael Saechang added a comment -

Thank you Mark for testing. Closing as 'Fixed'.

Show
Michael Saechang added a comment - Thank you Mark for testing. Closing as 'Fixed'.
Hide
Permalink
Mark Jin added a comment -

PASSED Manual Testing following the steps in the description.

Fixed on:
Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: 718a3c4fe6bba0e751ca458406d57b5b4b525f5f.

Move subfolder to home folder cause "You do not have the required permissions.".

Show
Mark Jin added a comment - PASSED Manual Testing following the steps in the description. Fixed on: Tomcat 7.0 + MySQL 5. Portal 6.1.x EE GIT ID: 718a3c4fe6bba0e751ca458406d57b5b4b525f5f. Move subfolder to home folder cause "You do not have the required permissions.".

People

Vote (0)
Watch (3)

Dates

  • Created:
    Updated:
    Resolved:
    Days since last comment:
    5 weeks, 6 days ago