フィードバックを送信
legacy-knowledge-base
公開されました Jun. 30, 2025

Provide other permissions to Guest user beside just view permission

written-by

Anushka Tiwari

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

legacy-article

learn-legacy-article-disclaimer-text

Issue

  • Can users give permission to the guest users to use the headless API to create, update, delete, etc. for documents & media, besides just the VIEW permission?

Environment

  • Liferay DXP 7.4

Resolution

  • These actions are disabled by default on purpose for guest users:
     
    <guest-unsupported>
    <action-key>ADD_DOCUMENT</action-key>
    <action-key>ADD_DOCUMENT_TYPE</action-key>
    <action-key>ADD_FOLDER</action-key>
    <action-key>ADD_REPOSITORY</action-key>
    <action-key>ADD_SHORTCUT</action-key>
    <action-key>ADD_STRUCTURE</action-key>
    <action-key>PERMISSIONS</action-key>
    <action-key>SUBSCRIBE</action-key>
    <action-key>UPDATE</action-key>
    </guest-unsupported>
  • This is not only for Documents & Media but is extended throughout the product. It is not possible to give write permissions to Guest users via UI or API.
  • Please note that if there are such API call options for guest users, any bad actor could use it to edit, delete, etc. all related records. Therefore, Liferay only allows these types of actions for authenticated users.

Additional Information

did-this-article-resolve-your-issue
legacy-knowledge-base
did-this-article-resolve-your-issue