Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Sitemap include option per page is not published from staging to live
Issue The Sitemap Include options (Edit page -> SEO) are different between staging and live environment even after publishing from staging to live.  Environment Liferay 6.2 EE Resolution Check if Page Versioning is...
Dynamic content fetched by Web Content template stays the same after updates
Issue User uses web content template to fetch dynamic content from the database. The value displayed on the page stays the same even if the data in the database has already changed. Environment Liferay DXP 7.0, Liferay DXP...
Blank page with “No Group exists with the key {companyId=0, groupKey=Guest}” error in log
Issue After restarting portal, the page turns into a blank page. The following error is reported in the log: 2019-04-03 04:27:28.258 ERROR [http-nio-8080-exec-5][PortalInstances:162]...
LFR_SESSION_STATE cookies are not marked as HttpOnly
Issue LFR_SESSION_STATE cookies are not marked as HttpOnly Environment Liferay DXP, Liferay 6.2 Resolution This is not a security issue because this cookie is created and used in session.js which is the portal's Javascript. ...
Folder Permission Inheritance in Liferay
Issue Do items in documents and media or web content folders inherit permissions from the folder in Liferay? Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay Portal Resolution In Liferay, documents...
How Can I Assign Roles to Users When Importing from LDAP?
Issue When importing users to Liferay DXP from LDAP, they are not being assigned the roles I want them to have from my LDAP server. Environment Liferay DXP LDAP Resolution In Liferay DXP, Users are...
Lodash Security Vulnerability in Theme Dependencies
Issue In the Liferay theme dependencies, Lodash versions 3.10.1 and below are used extensively as dependencies throughout. Versions of Lodash prior to 4.17.5 suffer from a security risk: CVE-2018-3721...
Total Number of Index Limit Error in Elasticsearch
Issue When new contents are created or updated in Liferay, they are not being added to the Elasticsearch index (they will not be displayed on the search results) If you check the log Liferay log file you will get this...
Show Multiple Layers of Menus Using Display Templates
Description The Navigation Menu widget lets you add navigation wherever you need it. You can place the widget on a page and then select a menu and style for the menu you are displaying. This widget provides a template List...
Generating SAML Metadata with HTTPS
Issue This article documents how to generate a SAML metadata XML file that also has HTTPS enabled. Environment Liferay Portal 6.2, DXP 7.0, DXP 7.1 Any web server  Resolution In order to generate a SAML metadata.xml...
Knowledge Base File Uploads Cannot be Restricted
Issue In the default Liferay portal, we have a property called dl.file.extensions= or (OSGi configuration properties in 7.1) that allows administrators to restrict the types of files that may be uploaded....
HTMLアンカーを使う
, knowledgeArticleType: troubleshooting, legacy: true, name: HTMLアンカーを使う, showDisclaimerMessage: true, sourceTeam: Support, ticketNumber: , title: HTMLアンカーを使う
Known Issue: Classic Theme Favicon Always Displayed When Using Microsoft IE11
This article describes a known issue specific to Microsoft Internet Explorer 11 (IE11) as documented on LPS-88702. In IE11, after navigating to a website page, the favicon will always be shown as the classic...
How do we enable GDPR for Liferay products?
Issue General Data Protection Regulation (GDPR) went into effect on May 25, 2018 Environment Liferay 6.2 Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Resolution It’s ultimately your responsibility to assess...
Managing Message Boards Categories and Threads Permissions
This article sets forth the permissions rules for managing Message Boards Categories and Threads. One question is whether the system is granular enough to allow users to delete only category threads for which category...
Patching Tool 2.0.11
Published: March 05, 2019 The Patching Tool 2.0.11 is a maintenance release for Liferay Digital Experience Platform 7.0 and 7.1 which includes fixes and minor updates. Release...
Why are user accounts shared when I have multiple LDAP servers configured?
Issue When a Liferay DXP bundle is configured to communicate with two or more LDAP servers there can be issues with user importing and users logging in. Example: If Liferay DXP is communicating with two LDAP...
Troubleshooting Service Builder Blob Compile Issues
Issue Service builder with Blob and compound primary key throws compilation error. The console errors might look like this: [javac]...
Removing Older Elasticsearch Plugins Needed for Successful Upgrade to ES 6.1
Issue It was discovered that older versions of the Elasticsearch plugin can interfere whenever administrators are deploying the latest version. The use case: Administrators are deploying the latest Elasticsearch 6.1...
Understanding WebDAV Upload Permissions
Issue Are documents uploaded through WebDAV given more permissions than UI uploads? Why can one user who uploads a document through WebDAV update or delete the file while another user with the same level of...