Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
How can I restart just one Liferay node from the Cloud Console?
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue One node isn't working as expected, but I don't want to...
How to filter Objects entry with picklist's name in filter
Issue I have created 2 picklists, e.g. picklist1 and picklist2. And I created 1 object where I create 2 fields of type picklist and I mapped this to above picklists. Now I have added an object entry. Picklist values are...
Is there a way to bypass CAPTCHA without having to disable it?
Issue We will do some Automation tests in our QA environment and would like to know if it is possible to bypass CAPTCHA using configuration settings without having to disable it. Environment Liferay DXP 7.4...
Content creators should able to change the permissions of multiple content at the same time
Issue As a Content Creator, I want to be able to change the Web Content permissions as a bulk action. So that I’m able to change the permissions of several content at the same time. Environment Liferay DXP [all...
The status for shared content is blank
Issue The status is not visible, it always coming blank.  Steps to reproduce: Navigate to the 'Content and Data'> Document and Media> upload 1-2 documents upload a new image and click on three dots to get the share...
"Text verification failed" Captcha error
Issue We are trying to use the Reset Password functionality, but every time we enter the captcha text correctly, we always get an error saying: "Text verification failed". We noticed this same behavior on other...
Need to create a role for accessing Server Administration
Issue User needs to create a custom role and add permissions to access Server Administration Environment Liferay DXP 7.0+ Resolution There are no options provided under System to add these permissions. Only an...
Need to save the value of the Form's disabled field
Issue When we disabled the form field using the 'Form Rule', it disabled the fields for the specific user who did not fit the provided role or did not match the criteria. For other users who do not fit the same role...
User can see more Organisations
Issue We have a problem the User, who has access and rights to selected organizations, can see all organizations when updating user info. Reproduction steps: Customer main user opens Users and Organizations...
Use Javascript with Client Extension on pages
Issue How to run Javascript on pages using a client extension? Environment Liferay DXP 7.4 Resolution With a JavaScript (JS) client extension you can run your own JavaScript on any page in Liferay without...
Missing Parameters Format in JSONT File when using Data Migration Center
Issue Facing an issue with the missing parameters in the JSONT format file when using the "Data Migration Center" portlet. Batch Client Extension only supports the "JSONT" file format. After generating the "JSONT"...
Vulnerability in Apache Tomcat (CVE-2023-46589)
Issue This security vulnerability (CVE-2023-46589) has been reported, and it is fixed in Tomcat 9.0.83. However, our current Liferay DXP 7.4 update 67 has a 9.0.71 Tomcat version. Environment Liferay DXP 7.4...
Your license does not have any allowed MAC addresses
Issue I am trying to activate my license but received the following error displayed on the screen  ERROR: DXP Production license validation failed java.lang.Exception: Your license does not have any allowed MAC address...
Sidecar Elasticsearch process is aborted
Issue Unable to restart the Liferay application server even after clearing temporary directories and 'An unexpected system error occurred' is showing on the UI. Following error appears in the log file:...
Liferay 6.2 EE 173 and CVE-2024-25145
Issue We have found the following article CVE-2024-25145 Stored XSS with search results if highlighting is disabled, however it does not specify whether Liferay 6.2 EE 173 is affected or not. Environment Liferay 6.2 EE...
ConnectionPoolTimeoutException: Timeout waiting for connection from pool when full reindex
Issue As an Admin, users want to be able to decide if they want to cache extracted text when indexing so that if they are doing re-indexing they can disable this cache. In 7.4, there is an HTTP request call to S3...
Unable to start sidecar elasticsearch after upgrading JDK 8 to JDK 11
Issue Following error appeared in the console after upgrading JDK 8 to JDK 11: [Sidecar:617] Sidecar Elasticsearch process is aborted java.util.concurrent.ExecutionException:...
java.net.UnknownHostException: artifacts.elastic.co
Issue While starting the Liferay application server, the below error is encountered in the log file: ERROR [Start Level: Equinox Container: 53ada45d-f96c-449b-8a58-e68855c57982][ElasticsearchConnectionManager:70]...
Uploading the large image the resize option is not appearing to resize the editor
Issue Upload the large image in the web content editor; the option to resize the editor is not available for the first time to check after publishing. Steps to reproduce: 1. Start the server. 2. Navigate to the...
Quarterly Release Error: [ComboServlet:389] Skip /o/frontend-js-jquery-web/jquery/boostrap.bundle.min.js
Issue After upgrading/downloading the latest Quarterly Releases, upon startup the following error is populated: [ComboServlet:389] Skip /o/frontend-js-jquery-web/jquery/bootstrap.bundle.min.js.  This error populates...
Specific pages show the message "No theme found for specified theme id custom_WAR_customtheme. Returning the default theme." in logs
Issue The following warning message appears in logs: [http-nio-8080-exec-13][ThemeLocalServiceImpl:220] No theme found for specified theme id custom_WAR_customtheme. Returning the default theme. Environment Liferay...
Multiple Open Orders for an Account
Issue Multiple orders are being created for an account. Multiple orders should not be in the open status if they are placed from the same account or have the same order ID. The cart should be updated with the...
Fragments associated with Search Blueprints not appearing
Issue Fragments and Web Content, primarily associated with Search Blueprints are not appearing or rendering on pages. Potentially, this error may appear when starting up environment FrameworkEvent ERROR...
Can SAML be used to send an attribute that can be used to assign site roles?
Issue Currently, SAML is not designed to be utilized to send an attribute that can be used to assign site roles. Environment Quarterly Releases Resolution This is an ongoing task, LPD-6336, for Liferay. Liferay is...
Why the Memory Metrics in Liferay PaaS differ from Liferay DXP
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Explain why the memory metrics for the Liferay service shown...
How to remove languages in Instance Settings?
Issue How can a user remove languages in Instance Settings? Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution Start up a vanilla bundle without any specific language settings. Go to Control Panel >...
Unable to PATCH a DateTime field in an Object back to Null
Issue The PATCH API request to change a DateTime field value in an Object back to Null does not work as expected. The value of the DateTime field is not changed, it remains the same. Environment Liferay DXP 7.4...
OpenID Connect Error - "Signed JWT rejected" with CAS
Issue When configuring authentication using OpenID Connect, login fails and the following error is reported: Unable to validate tokens: Signed JWT rejected: Another algorithm expected, or no matching key(s) found...
How to enable conversions for document library files.
Issue How to download converted document through Liferay Document Media portlet while using OpenOffice? Environment Liferay DXP 7.4  LibreOffice 7.1.6  OpenOffice 4.1.11  Resolution Add the...
Ampersand in Web Content Text field turned into & in Content Pages
Issue Create an example structure with the following associated template: <#ftl output_format="HTML" auto_esc=false> <p>-----------------</p> This should't be escaped: ${'&'} <p>-----------------</p> This should be...
How to Generate SAML Tracer export for Liferay Support
SAML Tracer can be a useful debugging tool for viewing SAML messages sent through the browser during single sign-on and single logout and helps with analyzing both SP- and IdP-initiated SAML flows, including viewing and...
How to get a list of portal Users and what Roles are assigned to them?
Issue I would like to get a list of Liferay portal users and what roles are assigned to them. Environment Liferay DXP 7.2+ Resolution Please run the attached Groovy script: ListUsersAndRoles.groovy  Additional...
What is the Default Service Account?
Issue What is the Default Service Account? What is its purpose? Why is a default-service-account row added automatically to the User_ table? Can this user be removed or adjusted? Environment 2023.Q3+ Resolution Imagine...
Error when adding files to Documents and Media through an Asset Publisher on a Widget Page
Issue When adding a file to Documents and Media on my Portal, through an Asset Publisher located on a Widget Page, there is no notification from the Portal signaling that the file has been added and the Portal remains...
I cannot use the Friendly URL of Categories
Issue I create a Category and a Display Page Template the following way: Navigate to Categorization > Categories Create a vocabulary and add one category under it Define a friendlyurl for the category (already done...
Page redirection issue while using Fragment as 'cacheable'
Issue User faces automatic page redirection while performing any actions in fragment is 'cacheable'. Issue goes away, if 'cacheable' option is unchecked. Environment Liferay DXP 7.3 Liferay DXP 7.4 Resolution Such...
Unknown publisher issue when installing Liferay developer studio
Issue When installing the Liferay Developer Studio on a Windows machine, it shows the unknown publisher. It is not showing the authorized publisher. Environment Liferay DXP 7.4 Liferay Developer Studio Resolution...
Possibility to change Friendly URL automatically generated in Objects
Issue The official Liferay documentation comments that when creating an object, displayed through a Display Page Template, an automatic URL is generated with the following syntax: "{domain}/l/objectEntryId" I would...
When I try to export a Site, the export fails with an error: XXXX could not be exported because its workflow status is not exportable.
Issue I am trying to export a Site. However, I receive the following error: An unexpected error occurred with the publish process. Please check your portal and publishing configuration. The...
How to set up antivirus scanning of files uploaded to Liferay Documents & Media in Liferay PaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Customers who aren't familiar with Docker can't easily setup...