Issue
-
After pasting the HTML component to a page and then editing it and placing a HTML code to fetch the list of Accounts that were created, it is noticeable that Liferay.util.fetch method does not work as expected.
When creating a user without permission to view Accounts and then impersonating this user using the Admin user, the user then is able to view all the Accounts through the HTML component.
Environment
- DXP 7.4
Resolution
- The issue was resolved by LPS-169881 and a hotfix should be requested from Liferay Support with it.
Subscriber Exclusive Content
A Liferay Enterprise Subscription provides access to over 1,500 articles that include best practices, troubleshooting, and other valuable solutions. Sign in for full access.
Sign In