Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
NullPointerException error seen with custom Terms Of Use
Issue When custom content in "Terms of Use" is set via Instance Configuration in Control Panel, and logging in as a new user for the first time, a NullPointerException is seen. Environment DXP 7.4 Resolution The Terms of...
Image URLs in headless API responses include the port number
Issue While using the headless API, users can see the port with the source URL.  Environment Liferay DXP 7.4 Commerce 4.0 Resolution This is the expected behavior as Liferay is either serving the full URL,...
Search isn't working on Grouped Product Page
Issue Encountering issues while searching for a product in the group product tab. Steps to reproduce: 1) Navigate to Product UI, create one grouped product and some 2-3 simple products 2) Open the grouped product...
Pagination is not correct on order details page
Issue All products are coming and on page 2, the product count is not correct. Steps to reproduce: 1. Add 7-8 products to the cart. 2. Place the order and go to the order details page and configure the pagination...
Email address field has a limit of 75 characters in Channel Notification template
Issue Navigate to Channels -> Choose a channel -> Notification Templates Add a new template Fill in the required details Under Email Settings add a very long email address (more than 75 characters) in the "To" field...
Upload same document in multiple languages
Issue Can the same document be uploaded in multiple languages? Environment DXP 7.3 Resolution Liferay DXP does not currently support this function, but there is currently a feature request for it to be added...
Page URL redirection is case sensitive
Issue When accessing a page with an upper or lower case friendly URL, we get directed to the page correctly. However, when using the redirect tool and using the lower case source URL, the destination URL can only...
How to extract the okta authorization token for each user?
Issue Once users log in to Liferay, the user should get redirected to Okta. After successful authentication, Okta is supposed to return an authorization token for that specific user.  Concern: After successful Okta...
Unable to extend user session on Weblogic
Issue When I call Liferay.Session.extend(); from Liferay 7.4 running on Weblogic, the user session terminates. Environment DXP 7.4 Weblogic Resolution This behavior is resolved by LPS-190923. Please open a help...
Editing issue in fragments when using rich text
Issue Using the following code in a fragment results in an error when editing the rich text field, using a copied text. The title field is empty and the pasted text gets duplicated and can not be edited and it gets...
The edited value of a Field Reference is not saved in the database
Issue When you create a form and add, for example, a Text field and in its advanced settings you change the Field Reference field, after publising the form, you will expect to find that the new value of the...
Adding options to an item in order creation with POST headless-commerce-admin-order/v1.0/orders API
Issue I have created a new order with an API call, which includes also adding options to the order item, but when I query the order, I see that the options are not there Steps: 1. Create a Minium site. 2. Create a business...
The fields of the custom theme need to be re-filled
Issue When using the look-and-feel.xml file to create a custom theme in Liferay, users observe that when they update the theme and reapply it, the previously entered data in the custom theme fields is lost. This...
Not able to change the site logo in a site created using a site template
Issue I'm trying to change the site logo using the configuration in the public pages, but there isn't an option to do so. Environment Liferay DXP 7.4 Resolution In order to be able to change site logo from a...
Access to edit web content giving timeout
Issue When trying to edit web contents they take a long time to open, the behavior in question was only reproduced in an oracle database in which the portal has to have a high number of pages and entries in the...
Is One Time Password's expiration configurable?
Issue When does One Time Password expire? Can you set the validity timeframe of the OTP? Environment DXP 7.2+ Resolution OTP is HTTP session based, if the session expires, OTP expires as well. And it can only be used...
Access denied when connecting to Liferay DL through WebDAV
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue An 'Access Denied' or similar related error is...
Vulnerabilities in CKeditor
Issue We plan to update the CKeditor version due to several vulnerabilities including XSS. https://security.snyk.io/package/npm/ckeditor4/4.17.1...
Changing events to a past date
Issue Is it possible to edit expired events to change the date to past date? Environment All environments Resolution This is the expected behavior and the best practice that you can only set the expiry date to a...
Is it possible to customize user roles in our Liferay Cloud environment?
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I would like to know how to set custom user roles for team...
Security configuration related to session management
Issue There are some security configuration requirement regarding session management. Environment Liferay DXP 7.4 Resolution Application uses the 'referrer' header as a supplemental check only, and not just for any...
Unable to export site pages with circular references
Issue When trying to export pages, a null error is shown in the UI. Environment Liferay DXP 7.4 (equal to or below Update 66) Resolution Upgrade to Liferay DXP 7.4 Update 66 or higher to resolve the issue. Or...
Unable to build Service Builder with default packages
Issue Service Builder gives the below error during build without any changes to default classes: xxx\test-service-service\src\main\java\test\service\service\persistence\impl\FooPersistenceImpl.java:2425: error:...
Web content structure filter is not working properly
Issue When inserting a structure filter for a web content, the results are not listed correctly, always displaying all results, regardless of the chosen structure. Environment Liferay DXP 7.4 Update 71 Resolution...
Users and Pages are not Visible
Issue The components User, UserGroup, and Layout have been re-indexed. However, Users and Pages are still not visible. Environment Liferay DXP 7.1 Resolution The possible cause of this is due to the cluster health...
Unable to search users in admin portal
Issue Re-indexing has been ongoing for quite some time, and certain users are not being searched in the admin portal or control panel section. Environment Liferay DXP 7.1 Resolution If the above issue arises in a...
Maven based Liferay Workspace for DXP
Issue Unable to get the EE version of Liferay DXP while choosing maven in Liferay Developer Studio. Environment Liferay DXP 7.0+ Resolution User can manually change two configuration inside the pom.xml file to use...
Page not found error 404 when attempting to download a document in Documents and Media
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Page not found error 404 when attempting to download a document in...
Anonymous users tracked separately like Known users
Issue We noticed that Known individuals have all kinds of data tracked and displayed for each individual. We would also like to track anonymous individuals the same way, possibly by adding a new tab on the...
Unable to activate different tab on the different pages
Issue Activating the same tab on different pages. Steps to reproduce  Navigate to Site Menu > Design > Page fragment Click on the add button and create a master page. Now, drag and drop the 'Tabs' under the basic...
Proper date and time is not visible on media and inside Product Relations Tab
Issue Steps to reproduce: 1. Navigate to products. 2. Open any existing product. 3. Navigate to the media tab and notice it's showing the modified date as 2 months ago, 2 minutes ago, or 2 days ago. 4. The same...
OpenID Connect Error - "Signed JWT rejected"
Issue When configuring authentication using OpenID Connect, login fails and the following error is reported: Unable to validate tokens: Signed JWT rejected: Another algorithm expected, or no matching key(s) found...
How can I disable the Navigation Categories portlet filtering for the Asset Publisher portlet?
Issue Navigation Categories portlet displays Asset Publisher portlet entries based on category selection.  Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4...
Gradle PKIX Certification Error for Maven Policy
Issue We are configuring a new environment and observing what looks to be a gradle license or certification related issue given the below error: openssl config failed system library no such process Failure build failed...
Guest Users Are Unable to View Web Content After Upgrade
Issue After upgrading from Liferay 7.2 to 7.4 we have observed that guest users are unable to view web content. In 7.2 we had unchecked the 'article view permissions' checkbox under system setting > web content, but...
Issue with Publishing Expired Content in Publications
Issue When trying to approve a Publication that includes expired Web Content, the following error is displayed: "This publication contains unapproved changes that need to be approved before being published."...
How can I know when a Web Content was created and when it was published from database
Issue How can I know when Web Content was created and when it was published from database Environment Liferay DXP 7.2 Resolution The created time of a Web Content is stored in the column called 'createDate' in the table...
How to integrate feeds from social media like Instagram/twitter/facebook based on hashtag in Liferay
Issue How to integrate feeds from social media like Instagram/Twitter/Facebook based on hashtags in Liferay? Environment Liferay DXP 7.1. Resolution Liferay unfortunately doesn't have this out-of-box functionality....
Uncaught type errors on browser console while adding product pricelist
Issue In a product's edit SKU side panel, it's not possible to add a new price entry Steps to reproduce: 1) Navigate to Commerce> Products 2) Create a new product or click the existing one 3) Now, go to SKU > click...
Currency management missing in the discounts
Issue To choose the correct currency for 'Discount', we must first set our currency as the primary currency in Commerce> Store Management> Currencies. Apart than that, it is not set. Is this expected Discount...