PUBLIC - Liferay Portal Community Edition

Control Panel Page shows all tools without permissions

Details

  • Type: Bug Bug
  • Status: Closed Closed
  • Priority: Minor Minor
  • Resolution: No Longer Reproducible
  • Affects Version/s: 6.1.1 CE GA2, 6.1.20 EE GA2
  • Fix Version/s: 6.2.0 CE M4
  • Component/s: -- none --
  • Labels:
    None
  • Similar Issues:
    Show 5 results 

Description

An user who is able to manage a page can change the type from "portlet" to "control panel". The tool list which will be shown now will show all installed tools, no matter if the user has permissions to the tool nor if it's activated. When choosing tools the user isn't allowed to see, he does not see them on the page, so it's not a security bug.

Activity

Ascending order - Click to sort in descending order
Hide
Permalink
Tomas Polesovsky added a comment -

Cannot reproduce on 6.2.x

Show
Tomas Polesovsky added a comment - Cannot reproduce on 6.2.x
Hide
Permalink
Mika Koivisto added a comment -

Resolving based on Tomas' comment.

Show
Mika Koivisto added a comment - Resolving based on Tomas' comment.
Hide
Permalink
David Kubitza added a comment -

It may have business value if it's reproducible in 6.1.20 EE GA2 with lastest patches. I don't have applied the last patch to my EE version yet, so would be nice if someone could consider to test it. It's a lot like LPS-30624.

Show
David Kubitza added a comment - It may have business value if it's reproducible in 6.1.20 EE GA2 with lastest patches. I don't have applied the last patch to my EE version yet, so would be nice if someone could consider to test it. It's a lot like LPS-30624.

People

Vote (0)
Watch (1)

Dates

  • Created:
    Updated:
    Resolved:
    Days since last comment:
    17 weeks, 4 days ago