Why can default users access a Sites page on the Control Panel?

Issue

  • Default Users can access a Sites page on the Control Panel by directly accessing: http://localhost:8080/group/control_panel/manage/-/sites

Environment

  • Liferay DXP 7.0
  • Liferay DXP 7.1
  • Liferay DXP 7.2

Resolution

  • The following property should be set to false to prohibit this behavior:
    ##
    ## Sites Admin Portlet
    ##
    #
    # Set this to true to allow site members to see the Sites Admin portlet
    # and the sites they are members of in the Control Panel. Setting this to
    # false will only allow administrators to see this portlet in the Control
    # Panel.
    #
    # Env: LIFERAY_SITES_PERIOD_CONTROL_PERIOD_PANEL_PERIOD_MEMBERS_PERIOD_VISIBLE
    #
    sites.control.panel.members.visible=true

Additional Information

  • A Feature Request has been submitted to change the default value of this property to false to prevent this behavior. Please follow LPS-100248 for updates on the Feature Request's progress.
这篇文章有帮助吗?
0 人中有 0 人觉得有帮助