Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Restricting the Guest Role's Access to the Home Page
Issue When trying to change the view permission of a page it's not possible to do it for the Guest role in the first page: it shows as non-interactive. Environment QR 2024.Q3, 2024.Q4, 2025.Q1 Resolution This is...
Feasibility of Viewing Old and New Changes in Workflow
Issue Is it possible for a reviewer to compare both the Old and New versions when a user makes changes and resubmits for workflow approval in Web Content, Document & Media, and Commerce Products? Environment Liferay...
Password syntax checking error does not appear when configuring with Minimum Lowercase 1 when creating a new account
Issue I have an issue with checking the password syntax. When they configure the password syntax with Minimum Lowercase 1, Minimum Symbols 1, and Minimum Uppercase 1, try to create an account for a guest user, type a...
Search Result Limit Resets to 10000 After Container Restart
Issue We changed the index.search.limit property in portal-ext.properties We also set the same value in Control Panel -> System settings -> Search -> Elasticsearch 7 -> Max Result Window The search result limit...
Downloading Large Log Files from Liferay Cloud
Issue Unable to download complete log files from the Liferay Cloud console. The downloaded file size appears truncated. Environment Liferay PaaS Resolution The Liferay Cloud console limits log file downloads to...
Unable to Provision Users via SCIM
Issue User provisioning via SCIM is failing. Liferay logs indicate a permission error: ERROR [org.wso2.charon3.core.protocol.endpoints.AbstractResourceManager] Unable to provision a portal user for null...
Redirecting a non-www Domain to a www Domain
Issue How can I redirect traffic from my non-www domain (e.g., example.com) to my www domain (e.g., www.example.com)? Environment Liferay DXP 7.4 Quarterly Releases Resolution You can configure a redirect using Liferay's...
Liferay shows SQL Syntax errors when connected to MariaDB 10.3+ in Oracle_Mode
Issue When connecting my Liferay server to MariaDB 10.6, I get the following error when creating a widget page:  (conn=143451) You have an error in your SQL syntax; check the manual that corresponds to your MariaDB...
Can Liferay pass User Roles to the Service Provider?
Issue In a SAML configuration where Liferay acts as the Identity Provider, is Liferay able to pass its User Roles to the Service Provider?   Environment Liferay 7.4   Resolution Yes, it is possible. Liferay will send...
Security questions and answers are stored unencrypted
Issue User security questions and answers are stored unencrypted in the Liferay database and LDAP. Environment All Liferay versions. Resolution Liferay does not offer, out-of-the-box, the ability to...
NoSuchFileEntryException when updating web content with images in a task executor
Issue When updating web content within a task executor, if the web content structure includes an image field (fileEntry), the update JournalArticle updateArticle(article.getUserId(), article.getGroupId(),...
Most Viewed Assets Portlet Ignores Category Filters
Issue We created our categories programmatically (using APIs). These categories are ignored by the Most Viewed Assets portlet. Even with category filters configured, the portlet shows assets based on views only,...
Setting a Site-Specific Display Page Template for a Web Content created from a Global Structure
Issue You are using a Web Content Structure that was created in the Global site so it can be shared across multiple sites. You need to set a default Display Page Template (DPT) for this structure, but you want the...
HTML in Text field in structures is not escaped
Issue After upgrading to 2024.Q4, HTML markup found in the Text field within structures is no longer being escaped properly The HTML markup is showing up as plain text   Environment 2024.Q4 Resolution This is the...
Admin UI breaks after changing site default language
Issue After changing a site's default language to a non-English locale and disabling English (United States) support, the Admin UI breaks. The issue occurs when the "Use Localized URL" option is selected in...
Unable to Save Forms After Enabling ModSecurity
Issue After enabling ModSecurity with the default settings, forms with more than three fields cannot be saved. The following error message is displayed in the logs: ModSecurity: Access denied with code 400 (phase 2)....
"Select Master Page is temporarily unavailable" when trying to add a Display Page Template
Issue I want to add a Display Page Template and I get the following error: In the logs, I see: 2025-02-10 18:18:39.160 ERROR [http-nio-6080-exec-8][PortletRequestDispatcherImpl:295] Unable to dispatch request:...
Request to /o/change-tracking-rest/v1.0/ct-collections returns 403
Issue When accessing Publications through the UI, they are not displayed. The request to `/o/change-tracking-rest/v1.0/ct-collections` returns a 403 Forbidden error when it goes through the Web Application Firewall...
"Interval is either equal or less than 0" error is produced during the upgrade and checkInterval is reset to zero
Issue When upgrade from 6.2 to 2024.Q4, following error is produced in the log files: 2025-02-11 20:48:20.910 ERROR [main][ROOT:47] bundle com.liferay.journal.web:5.0.180...
Updating Parent Object Fields from Child Object Actions
Issue How to update a field's value in the parent object when a new child instance is created using object actions of the child object. Environment Liferay DXP 7.4+ Resolution Use a Groovy script Action triggered by...