Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Upload same document in multiple languages
Issue Can the same document be uploaded in multiple languages? Environment DXP 7.3 Resolution Liferay DXP does not currently support this function, but there is currently a feature request for it to be added...
Content Page History
Issue We wanted to check with Liferay support if there is any functionality for viewing content page history or to revert back to previous version? Environment DXP 7.3 Resolution Liferay DXP does not currently...
I'm unable to change Staged Content configuration
Issue I am not able to change the Staged Content under Staging Configuration, as the checkboxes are seen greyed out and all disabled to change any value in existing configuration. Environment Any DXP environment with...
Page URL redirection is case sensitive
Issue When accessing a page with an upper or lower case friendly URL, we get directed to the page correctly. However, when using the redirect tool and using the lower case source URL, the destination URL can only...
How to extract the okta authorization token for each user?
Issue Once users log in to Liferay, the user should get redirected to Okta. After successful authentication, Okta is supposed to return an authorization token for that specific user.  Concern: After successful Okta...
Unable to extend user session on Weblogic
Issue When I call Liferay.Session.extend(); from Liferay 7.4 running on Weblogic, the user session terminates. Environment DXP 7.4 Weblogic Resolution This behavior is resolved by LPS-190923. Please open a help...
Editing issue in fragments when using rich text
Issue Using the following code in a fragment results in an error when editing the rich text field, using a copied text. The title field is empty and the pasted text gets duplicated and can not be edited and it gets...
The edited value of a Field Reference is not saved in the database
Issue When you create a form and add, for example, a Text field and in its advanced settings you change the Field Reference field, after publising the form, you will expect to find that the new value of the...
Liferay starts up creating tables and populating them with default data after restoring an upgraded database
Issue You might encounter the behavior where you successfully back up your current data and performed a successful upgrade in your local MySQL server. However, when restoring the upgraded data, Liferay does not...
TLS v1.0 and TLS v1.1 in Liferay DXP
Issue How to confirm that TLS v1.0 and TLS v1.1 are disabled by default in Liferay DXP 7.2? Environment Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution In Java 8, TLS v1.0 and TLS v1.1...
AuditEvent not saved after migrating from Portal 6.2 to DXP 7.4
Issue After migrating to DXP 7.4. If we use the portal normally, there aren't new entries in Audit_AuditEvents table. Environment Liferay DXP 7.4 Resolution Go to System Settings -> Audit -> Persistent...
URL redirect not allowed in form submission
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue How do I direct my user to a specific URL when submitting a...
My custom dropdown items are disabled
Issue After following the steps of overriding the management toolbar the custom dropdown items are shown as disabled. Environment Liferay 7.4 Resolution You need to needs your customm buttons “actions” in...
Adding options to an item in order creation with POST headless-commerce-admin-order/v1.0/orders API
Issue I have created a new order with an API call, which includes also adding options to the order item, but when I query the order, I see that the options are not there Steps: 1. Create a Minium site. 2. Create a business...
The fields of the custom theme need to be re-filled
Issue When using the look-and-feel.xml file to create a custom theme in Liferay, users observe that when they update the theme and reapply it, the previously entered data in the custom theme fields is lost. This...
How to manually trigger LDAP imports before the import interval is reached
Issue I want to manually trigger LDAP imports by triggering the UserImportConfigurationModelListener scheduled job. However, when I trigger this job, I see the following line in the LDAP DEBUG logs: DEBUG...
Error "Uploaded LAR file type layout-set-prototype does not match Portlet." reported when importing site template lar file
Issue Go to Control Panel --> Site Templates Click the icon with three vertical points in the upper right corner of the page and click Export/Import Select Import section Then importing a site template lar file, the error...
Index is accessed at startup might result in [HTTP/1.1 404 Not Found]
Issue You might encounter a behavior where Liferay tries accessing certain indexes that had a different name in previous versions. Normally this is not causing any issues, however you might have specific...
Unable to download the file from the workflow form
Issue Not being able to download the file from the workflow task shows: 'The document was deleted'  Steps to reproduce: 1. Navigate to Control Panel > Users & Organization. 2. Create an organization. 3. Create a...
Not able to change the site logo in a site created using a site template
Issue I'm trying to change the site logo using the configuration in the public pages, but there isn't an option to do so. Environment Liferay DXP 7.4 Resolution In order to be able to change site logo from a...
Email test@domain.invalid is used instead of the configured one
Issue Although you configure through Instance Settings -> Email -> Email Sender an specific email sender, test@domain.invalid is used and the following WARN log shows ups when trying to send emails from...
Access to edit web content giving timeout
Issue When trying to edit web contents they take a long time to open, the behavior in question was only reproduced in an oracle database in which the portal has to have a high number of pages and entries in the...
Is One Time Password's expiration configurable?
Issue When does One Time Password expire? Can you set the validity timeframe of the OTP? Environment DXP 7.2+ Resolution OTP is HTTP session based, if the session expires, OTP expires as well. And it can only be used...
Access denied when connecting to Liferay DL through WebDAV
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue An 'Access Denied' or similar related error is...
No Group exists with the primary "xxxxx" key shown in the logs
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue The following messages are identified in the logs: Jun...
Vulnerabilities in CKeditor
Issue We plan to update the CKeditor version due to several vulnerabilities including XSS. https://security.snyk.io/package/npm/ckeditor4/4.17.1...
Changing events to a past date
Issue Is it possible to edit expired events to change the date to past date? Environment All environments Resolution This is the expected behavior and the best practice that you can only set the expiry date to a...
Error when importing .lar file: "Score -0.x is not a value between 0 and 1"
Issue When trying to import a .lar file, the following error is displayed: Score -0.2 is not a value between 0 and 1. Environment Liferay DXP 7.0  Liferay DXP 7.1  Liferay DXP 7.2  Liferay DXP 7.3 Liferay DXP...
Is it possible to customize user roles in our Liferay Cloud environment?
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I would like to know how to set custom user roles for team...
Adaptive media not miniaturized after trying to adapt remaining
Issue When trying to adapt media that were not automatically adapted using the "Adapt remaining" function, an error is shown in the UI and in the logs it may be possible to see the following error or warning:...
Security configuration related to session management
Issue There are some security configuration requirement regarding session management. Environment Liferay DXP 7.4 Resolution Application uses the 'referrer' header as a supplemental check only, and not just for any...
Unable to export site pages with circular references
Issue When trying to export pages, a null error is shown in the UI. Environment Liferay DXP 7.4 (equal to or below Update 66) Resolution Upgrade to Liferay DXP 7.4 Update 66 or higher to resolve the issue. Or...
Unable to build Service Builder with default packages
Issue Service Builder gives the below error during build without any changes to default classes: xxx\test-service-service\src\main\java\test\service\service\persistence\impl\FooPersistenceImpl.java:2425: error:...
Web content structure filter is not working properly
Issue When inserting a structure filter for a web content, the results are not listed correctly, always displaying all results, regardless of the chosen structure. Environment Liferay DXP 7.4 Update 71 Resolution...
Users and Pages are not Visible
Issue The components User, UserGroup, and Layout have been re-indexed. However, Users and Pages are still not visible. Environment Liferay DXP 7.1 Resolution The possible cause of this is due to the cluster health...
Unable to search users in admin portal
Issue Re-indexing has been ongoing for quite some time, and certain users are not being searched in the admin portal or control panel section. Environment Liferay DXP 7.1 Resolution If the above issue arises in a...
Maven based Liferay Workspace for DXP
Issue Unable to get the EE version of Liferay DXP while choosing maven in Liferay Developer Studio. Environment Liferay DXP 7.0+ Resolution User can manually change two configuration inside the pom.xml file to use...
Special character validation for product relation type
Issue Special Characters should not be allowed. Steps to reproduce: 1. Navigate to the System Settings -> Catalog -> Product Relations 2. Add new value as "<script>alert(1);</script>" 3. Save 4. Now, go to any...
Unable to edit react fargment
Issue The user has created and uploaded a react fragment, but is unable to edit the same. Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution This is an intended behavior of the Liferay, to avoid bad experiences...
Workflow User Notifications triggered in State node throw NoSuchTaskInstanceTokenException
Issue When using notifications as part of the workflow, when triggered in a State node, the notifications are generated but when they are selected, the following exception appears in the logs 2023-05-09 20:47:25.666...