Search Results

This article is a legacy article. It applies to previous versions of the Liferay product. While the article is no longer maintained, the information may still be applicable. When there are updates to plugins in the Liferay Marketplace, it is possible to receive on-screen notifications...

In custom environments, it may be necessary to apply custom styles to specific portlets. The example below gives guidance on how to override the Liferay Theme CSS in order to customize portlets to fit requirements. Resolution Affected Products Liferay Portal 6.0 EE SP2 and above Please...

This article documents some of the more complex use cases when granting permissions to a site. Who can be site members? I am having trouble adding user groups to a site; the user groups are not displaying. I don't want site Members to have permissions to add content to a page. How can I...

This advisory comes in response to the recent public announcement of a potential Server-Side Request Forgery (SSRF) vulnerability in Liferay Portal 7.0.4. The report talks about a perceived vulnerability for the pingback functionality in the blogs feature of the product. You can find a...

This article documents how the Web Content Display portlet is designed to display different versions of the same Web Content article. In particular, this article discusses the intended behaviors for expired or those scheduled for future display. Resolution Content creators often create...

This article is intended for legacy versions of Liferay Portal CAPTCHA is an industry standard security measure that requires users to enter what they see a small window as part of the validation process when creating an account. Only human users are able to see the contents. Liferay has...

This article documents a possible known issue where there is ThreadLocal leak shown in the console logs when shutting down the application server: org.apache.catalina.loader.WebappClassLoaderBase.checkThreadLocalMapForLeaks The web application [ROOT] created a ThreadLocal with key of...

When view permissions for guests are unchecked for a portlet, a guest will see the following message in the portlet: You do not have the roles required to access this portlet. While this is one way to handle guests who don't have access to the portlet, it is also possible to hide this...