This feature introduces customizable permissions for the "Owner" role and other user roles within Publications, allowing administrators to define exactly who can publish, edit, invite users, or manage permissions at the publication level. A new "Permissions" section has been added to the "Enable Publication" settings, along with an "Edit Permissions" button that opens the Publication permissions modal. Admins can now revoke the "Publish on Production" permission for any user on a publication-by-publication basis. Once revoked, the change is reflected immediately, the user will no longer be able to publish content to production, and the revoked status is saved and visible in the publication permissions settings. Only users with the Admin role or the specific permission to manage publication roles can make these changes. This enhancement provides granular control over user capabilities within each publication, helping teams better manage their content workflows and avoid accidental publishing.
 

Key benefits:

• Safeguard Production Changes: Blocks users from publishing or modifying production content via Publications unless explicitly granted.

• Enhanced Role Governance: Admins now have complete oversight of publication-level permissions for all user roles, including Owners.

A new warning has been added to the Publications configuration screen to alert admins when "Sandbox Only" mode is enabled but publication Owners still have permission to publish. In this scenario, any user who creates a sandbox publication can still push changes to production, potentially bypassing the intended protection. The system now displays a warning message when this configuration is detected, guiding admins to review and adjust permissions for the Owner role accordingly.
 

Key benefits:

• Prevent accidental publishing by alerting admins when Owner permissions still allow publishing in Sandbox mode.

• Increase visibility into role-based permissions that may unintentionally allow production changes.

We enabled navigation menus to be retrieved using their External Reference Code (ERC) through Liferay’s headless APIs. This enhancement enables a more precise and consistent identification of navigation menus across sites and environments, particularly useful in multi-site and content migration contexts. It complements the existing functionality by providing an alternative for IDs.
 

Key benefits:

• Improved data consistency: ERC-based retrieval ensures references remain valid across environments.

• Easier data migration: ERCs streamline the export/import process across different Liferay sites by providing a consistent identifier.

• Better filtering options: Admins can now export navigation menus based on creation or modification date range, giving finer control over headless operations.

As customers increasingly adopt HTML5 for content creation, there's a growing need to upgrade the current rich text editing capabilities and CKEditor 5 has been selected as the default editor for Liferay DXP to meet this demand. CK Editor 5 has been made available in DXP under Beta Feature Flag. (FF-11235):

• Web Content Description field

• Page Builder:

  • Paragraph

  • Forms → Rich Text

To help users build pages faster with more design options, Liferay now allows direct access to Marketplace fragments from within the page builder. In addition to native and already-installed fragments, users can now browse and install additional fragments available on the Marketplace—expanding their library without leaving the editor.

This gives customers the ability to use pre-built fragments shared by Liferay, technology partners, and the broader community, making it easier to create flexible, high-quality pages with less effort.

Users can translate text fields from Objects when using Text Input Fragments in Form Containers.

Dynamically show or hide configuration fields in a custom fragment based on user input values.

With the introduction of the new CMS approach for managing object entries, the existing 1:1 nested object entry functionality in the Page Builder (LPD-20213) is now deprecated and will be removed. This feature has proven to be complex and underutilized by end-users.

The new approach, being developed under the CMS 2.0 initiative, will offer a more intuitive user experience for object relationships, allowing users to configure child structures as repeatable or non-repeatable.