Details
-
Type:
Bug
-
Status:
Closed
-
Priority:
Minor
-
Resolution: Won't Fix
-
Affects Version/s: 6.2.0 CE M4
-
Fix Version/s: 6.2.0 CE M4
-
Component/s: WCM, WCM > Asset Publisher
-
Labels:None
-
Environment:Operating System: Windows 7
Application Server: Tomcat 6.0.x
Java Virtual Machine: Java 6
Database: MySQL 5.5
-
Similar Issues:
Description
1. As admin log in, create one web content, then click the web content perssion button to assign permission to role. Please see the attachment jounralArticle_permission.jpg
2. Unckecked View permission in Guest role and Site Member role
3. Create one user and then assign the use into liferay site.
4. Create one blog entry. You may check the permission regarding the blog. Please see the attachment blogEntry_permission.jpg
5. Add Asset Publisher Portlet in page. We will see the two entry display in Asset Publisher Portlet
6. Use the created user(role: site member) log in, you will find that the two entry still display in Asset Publisher Portlet
Expected Behavior: The user should only see blog entry because he doesn't have "View Permission" regarding the web content
The behavior is expected behavior, the explanation is from
LPS-30449, as the followings:"Within both Asset Publisher and Related Assets there is a configuration option called "Enable Permissions" to enable this behavior. " I tried to checked the option "Enable Permissions", the view permission will take effect.
In code, the filterEntryQuery method of AssetEntryServiceImpl.java includes permission check(in the line 308 lines as the below code ).
{ filteredEntries.add(entry); }####
if (assetRendererFactory.hasPermission(permissionChecker, classPK, ActionKeys.VIEW))
####
So the issue can't be fixed.