Issue
-
After pasting the HTML component to a page and then editing it and placing a HTML code to fetch the list of Accounts that were created, it is noticeable that Liferay.util.fetch method does not work as expected.
When creating a user without permission to view Accounts and then impersonating this user using the Admin user, the user then is able to view all the Accounts through the HTML component.
Environment
- DXP 7.4
Resolution
- The issue was resolved by LPS-169881 and a hotfix should be requested from Liferay Support with it.
Contenido exclusivo para suscriptores.
Una Suscripción Enterprise de Liferay proporciona acceso a más de 1.500 artículos que incluyen las mejores practicas, diagnóstico de problemas y otras soluciones útiles. Inicia sesión para tener un acceso completo.
Inicia sesión