Issue
- After upgrading from 6.2 to 7.2, navigating to Control Panel > Users > Password Policies shows a UI error "Password Policies is temporarily unavailable", and an error is thrown in the logs:
ERROR [https-jsse-nio-8441-exec-4][PortletRequestDispatcherImpl:304]
Unable to dispatch request: java.lang.IllegalArgumentException: Someone may
be trying to circumvent the permission checker: companyId=20157, name=com.liferay.portal.kernel.model.PasswordPolicy,
primKey=20200, scope=4}
Environment
- Portal 6.2
- DXP 7.2
Resolution
-
This issue may be resolved by running the Verify Process in 6.2 to regenerate the resource permission, and then proceeding with the upgrade to 7.2
1. In 6.2, place the following properties in portal-ext.properties
verify.frequency=-1
verify.processes=com.liferay.portal.verify.VerifyResourcePermissions
2. Start up 6.2 and see in the console logs that the verify process is run during start up
3. Shut down
4. Query the resourcepermission table to see that the missing entry has now been regenerated
5. Upgrade to 7.2
6. Navigate to Password Policies
Additional Information
- Important Notes:
-
The Verify Process can take some time in a large database, and should first be tested in a non-Production environment
-
Please ensure that a full backup of the environment has been prepared prior to running the Verify Process
-
After executing the Verify Process the first time, please be sure to remove the properties or comment them out, else they will be run on start up every time if they remain set
-
- For more information concerning Liferay's Verify Process, please refer to the following Knowledge Base article: Liferay's Verify Process