Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Sites and Libraries breadcrumb only displays current site
Issue When making a selection from a web content display widget, clicking the “Sites and Libraries” breadcrumb link only displays the current site. Here are the steps to reproduce: Start a 2023.Q4.4 instance. Add a new site...
Retrieve display page template configured in web content article
Issue The goal is to retrieve, via Liferay's API, when a web content article is associated with a Display Page Template. Environment Liferay DXP 7.4+ Resolution Attached is a Groovy script as an example, through which...
How to identify customized pages
Issue I need to locate pages that specify an outdated attribute in their custom look and feel. I haven't found what database column indicates that a page is customized. Can you please point out the column to identify...
Publish button inaccessible with long titles
Issue A long Web Content title forces the top menu bar, hiding the publish button and preventing the user from saving the changes made. Environment Liferay DXP 7.4 Resolution To solve this behavior, open a Help...
Is it possible to manage resources per instance in Liferay?
Issue You have a Liferay server and several virtual instances, and want to know if it’s possible to configure resources for each virtual instance. Environment DXP 7.2+ Resolution Unfortunately handling...
API Response for commerce products with relationships does not contain manufacturerProducts nested fields
Issue Steps to reproduce: 1. Create a Minium site (so that you have products generated). 2. Create a new object "manufacturer" (I set it to company scope, and to appear in Applications/Content - "Panel Link"). 3. I added a...
Timeout Error During Restore or Deploy Operations
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue When attempting to perform restore or deploy operations...
Can I sort Liferay object entries in alphanumeric order?
Issue After sorting by the field name in ascending alphanumeric order, the results are currently sorted lexicographically. Environment Liferay DXP 7.4 Liferay Quarterly Release  Resolution This is the expected...
Wrong guest view permission assigned to images inserted into message boards threads (not following the thread's guest view permission)
Issue if there is no private page on a site, and we create a message boards thread with "Viewable By"="Site Members", and you insert an image in the message (with the editor's image icon), that image will in the Documents...
Including custom language keys in a custom theme
Issue Is it possible to include language keys from a language module in a custom theme? Environment Liferay DXP 7.0, 7.1, 7.2, 7.3, 7.4. Quarterly Releases. Resolution At this moment, there is no way to...
'liferay-ddm' taglib not working for Web contents in 7.4+
Issue We have some custom developments that use liferay-ddm taglib. After an upgrade to 7.4+, that taglib does not work. Environment Liferay DXP 7.4+ Resolution Starting in 7.4, Web Contents stopped using the DDM...
Color Field Error when using Web Content Structure
Issue When using the "Color" Field in a Web Content Structure, it doesn't save the previously selected value and the "Color" field doesn't load. Steps to reproduce: Create a structure, add at least one "Color" field...
What is the minimum Database Privilege Required for Liferay?
Issue Is it safe to limit the database permissions in any way? Can it be customized to use the minimum amount of Database Privilege and still be functional?  Environment DXP 7.0+ Quarterly Release Resolution...
BaseUpgradeServiceModuleRelease not available in 7.4 anymore, is there a replacement class?
Issue The class BaseUpgradeServiceModuleRelease was previously available in 7.3 and below and is used as a start/stop method to override and be used as a service tracker.  Environment DXP 7.4+ Resolution This class...
Whitelisting IPs in Liferay Cloud
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue You need to enable an IP or set of IP addresses to access your...
Make prefix URLs configurable - Feature request
Issue Make prefix URLs configurable - LPD-6813 We are waiting for this for a while. In which Quarterly it is going to be included?   Resolution LPD-6813 is a story ticket and is part of the feature request LPD-640,...
Using quarterly release tags in my workspace
Issue I would like to use the quarterly release tags for liferay.workspace.product and liferay.workspace.target.platform.version properties in the gradle.properties file. e.g. liferay.workspace.product=dxp-2024.q1.1...
Accessing Glowroot through the Liferay url returns a 404 error after updating from 2023.Q4 to 2024.Q1
Issue Error 404 occurs when accessing Glowroot through Liferay at /o/glowroot/ after migrating from version 2023.Q4 to 2024.Q1 Error in logs: 2024-04-11 12:51:40.306 WARN  [http-nio-8080-exec-46][code_jsp:161]...
Cannot upload files larger than 1GB in size to Document Library when clamAV is enabled
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Big files (>1GB) cannot be uploaded to the...
Limiting the Number of Search Results and Mitigating "Result window is too large." Errors when Using Elasticsearch via index.search.limit and index.max_result_window
Every functionality that relies on search engine queries in Liferay can return a maximum of 10,000 results by default. This applies to Search Bar widget searches, search toolbar searches, search REST API usages, and...
Documents Modified date changes if documents are moved between folders
Issue If we move documents between folders their Modification date is updated even if the document itself has not been modified. Environment Liferay 7.3+ Resolution The actual behavior is expected and a...
How can I send notifications to an specific role or user programmatically using workflows
Issue How can I assign workflow tasks to multiple users by Scripted Assignment, but not by assigning tasks to a role? Environment Quarterly releases 7.4 7.3 Resolution One common requirement is to...
Different total count of items when creating an export and import process over same site
Issue We are exporting site contents in a lar file. When checking the number of items in the export, we've seen some values. When we try to import this lar in another site, we are detecting that the number of...
Document Search takes too long to return results
Issue I have a page for displaying document search results, and it takes too long to load (several seconds). My site has hundreds of content pages, each containing dozens of widgets (including those from the master...
Backup service permission error: does not have storage.buckets.get access
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Backup service is not working properly and the...
Missing translation using taglib liferay-ui:message
Issue Trying to use liferay:ui message taglib in a custom module is not using key provided in Language.properties view.jsp <liferay-ui:message key="test.caption"/> Language.properties...
Configuring Email Sender Name and Email Address in Liferay Workflows Notification
Issue How to specify a custom email address or sender name for a workflow notification different from the default provided in portal.properties: workflow.email.from.name=test...
Elasticsearch 7.17.19 and 8.13 could abruptly stop with JDK version 22
Published on: Apr 10, 2024. This article is based on an Elastic knowledge base entry, edited to include Liferay specific details. Environment Liferay DXP 7.3, 7.4 and Liferay DXP 2023/2024 Quarterly Release...
NoSuchResourceActionException when navigating to Orders admin page
Issue When navigating to Applications Menu → Commerce →  Orders, the following error is thrown by the Liferay log: ERROR [http-nio-8080-exec-9][SearchPermissionCheckerImpl:159] null...
EXT module override is not being applied in 2023.Q3.3+ from ${liferay.home}/osgi/marketplace/override
Issue Adding an EXT module override in ${liferay.home}/osgi/marketplace/override no longer functions. Environment Liferay DXP Quarterly Release 2023.Q3.3 and later releases Resolution To workaround this behavior for the...
Workaround for deprecated Liferay "Forms" headless API
Issue The Liferay "Forms" headless API is deprecated. It is discussed in detail here: https://liferay.atlassian.net/browse/LPS-125528 The users could still want the functionality that was provided by these endpoints....
Guest can't update (call put method) in object headless API
Issue When trying to update a specific object through Headless API calls with a guest user (using an angular app), the following error is displayed: {     "status": "FORBIDDEN",     "title": "User 20099 must have...
POST call to /v1.0/sites/{siteId}/site-pages returns UnsupportedOperationException
Issue When trying to add a page via headless API using the POST endpoint /v1.0/sites/{siteId}/site-pages, UnsupportedOperationException is returned. Environment Liferay DXP 7.4 Quarterly Release Resolution  This API...
Error persistenceField is null when building portlet for Quarterly Release versions
Issue When trying to build a custom portlet for a quarterly release version, the build fails with the following error: persistenceField is null Environment com.liferay.gradle.plugins.workspace version is less than...
user_ .modifiedDate table changes upon User Login
Issue When a user logs in, Liferay is changing the user_ .modifiedDate value in the database table.    Environment Liferay 7.4   Resolution The behavior where user_ .modifiedDate field is modified upon User Login has...
WebDAV authentication with username and password has not been working since 2023.q4
Issue Until version 2023.q4 (excluding), the standard authentication (using username and password) to connect to WebDAV worked correctly. Since this version, such authentication has been disabled. Environment 2023.Q4...
Displaying multiple Search Results on a single page
Issue I want to display multiple Search Results in the same page. I am using tabs (for example, the out-of-the-box Tabs fragment), and I want each tab to have its own Search Results widget. How can I achieve this?...
How to minify the CSS and Javascript resources by customization
Issue How to perform the minification of the CSS and Javascript resources by using the Liferay theme builder. Environment Liferay DXP 7.4 Resolution How to make Gradle call gulp build in themes Essentially, the...
liferay-module-config-generator as a dependency
Issue As a developer, should I add liferay-module-config-generator in the block dependencies or in the block devDependencies? Environment Liferay DXP 7.1 Resolution This module is thought to be used in the block...
Database Permissions Required for Liferay
Issue Could you please provide us with a list of Database Permissions required for Liferay to function? (We are optimizing our application security concerning the Database) Environment Liferay DXP 7.1...