Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
How to use anchors in CKEditor
Issue I need to make use of anchors in my content Environment Liferay 7,3, 7.4, Quarterly Releases Resolution To be able to use anchors in your content, you'll need to follow these steps: Add a Rich Text...
Access to Display Page Template via webdav
Issue The Display Pages templates aren't accesibles via webdav. Environment Liferay DXP 7.4 Resolution It is not possible to access via webdav to Display Page Template. There is a solution to access it via Headless API...
Product Specification is not being displayed in search results when faceted navigation is enabled
Issue This article describes a scenario where search results are not being displayed for a Product specification when faceted navigation is enabled Environment Liferay Quarterly Releases Liferay DXP 7.4+ Resolution Please...
Unique constraint violation makes it impossible to change page configuration
Issue The attempted efforts to modify the configuration of a page don't work. There are errors in the log about a unique constraint violation for index IX_C753170C; ERROR [default...
Using Liferay.Language.get() in React client extensions
Issue We are building custom element client extension using React. We want to manage all the translations to different languages using the Language override feature in Control panel. Environment Liferay DXP 7.4 +...
Old images' thumbnails are not displayed in Google Chrome
Issue Some thumbnails related to images created a long time ago are not displayed in Chrome, but they can be displayed in Firefox. When inspecting the request through the Developer Tools, there is one of following...
Good practices in using Publications
Issue I would like to understand from the Product's point of view what would be the best way to create a new website using the Publications tool. What would be the best option among the scenarios below: Create the...
WARN [main][DDMFieldUpgradeProcess:626] Unable to get dynamic data mapping form field value type for content ID
Issue When upgrading to Liferay DXP 7.4 or Quarterly Releases there are some warnings in upgrade.log with below stacktrace WARN [main][DDMFieldUpgradeProcess:626] Unable to get dynamic data mapping form field...
Liferay Upgrade Planner for Quaterly Releases
Issue We want to upgrade our custom developments from DXP 7.4 update 48 to the Liferay Quarterly Release 2023.Q4. We are using Liferay Developer Studio 3.9.8, but its "Upgrade Planner" tool lacks compatibility with our...
Mini-cart does not pop up if a different language is used other from English
Issue Would like to open and use mini-cart, however, it does not pop up after clicking onto it. Using different language different from English (i.e. Spanish). Environment Liferay DXP Resolution You need to...
Recently published changes still shown as available for Staging in subsequent publication process
Issue Have a staged site Create a new web content article Create a new publication process and publish all the 'Content' changes by choosing the 'Last 12 hours' option After successful publication, create another...
Some pages are loaded blank when switching between pages when using the "document.write" javascript code
Issue We have upgraded from Liferay 6.2 to DXP 7.4. We have problems with some pages, if you open a direct link to them, they are correctly loaded, but if you switch between pages, they are loaded blank. We have detected...
Users without permission can see title of other dynamic data lists
Issue Consider the use case below. Log in as admin and create a regular role role1 and add to it the DDL permissions visible in the attached screenshot Dynamic-Data-Lists-01.png. Create a user A. Create a user group UG1...
Data migration of documents to S3 fails with NoSuchFileVersionException
Issue We use the Data Migration tool to migrate our document library from FileSystemStore to S3 (although the issue might be relevant for other migrations too) While it runs, it fails with NoSuchFileVersionException (see...
Unable to get dynamic data mapping form field value type for content ID
Issue While upgrading Liferay from DXP 7.1 to 2023 Q4.0, the below warnings were encountered: WARN [main][DDMFieldUpgradeProcess:626] Unable to get dynamic data mapping form field value type for content ID 6019934...
/c/ redirects to login page
Issue When the user tries to access the URL: 'http://localhost:8080/c/', even if the 'c' page doesn't exist, it redirects to the login page instead of a 404 page not found. Environment Liferay DXP [all versions]...
Metrics workflow data in the database
Issue There is a metrics table in the workflow on UI: Navigate to Application Menu→ Workflow→ Metrics. Select the workflow belonging to it and open the transaction under the workflow In which table has the metrics...
"Unable to import user" messages when performing concurrent authenticated JSONWS calls against an LDAP cluster
Issue Given an environment with the following components configured: LDAP cluster with more than one node. JSONWS calls through basic authentication. LDAP Import enabled. Login against LDAP. Several concurrent...
Can I use unique Coupon Codes in Commerce?
Issue We would like to distribute unique usage Coupon Codes to our clients.   Environment Liferay DXP 7.3+ Quarterly Releases   Resolution Unfortunately, it is only possible to configure one Coupon Code for a...
I cannot create an A/B Test on a staged Site
Issue I have a Site where Staging in enabled I want to create an A/B Test in AC The icon only shows up in the Staging site When I click it, I get the message that A/B Test requires connection to Analytics Cloud  ...
Redirecting to a Custom Page post SAML Authentication in Liferay
Issue I followed the guide Setting the Default Landing Page in Liferay Portal, to set up the default Landing Page, but it doesn't work with a Custom Page. Even though I followed the given steps, users are directed...
Administrators cannot manage Omni Admin apps, like the App Manager
Issue Users having the "Administrator" role cannot access the App Manager through Control Panel → System →App Manager. Environment DXP 7.0, 7.1, 7.2, 7.3, 7.4 Quartery Releases Resolution Take into...
404 Error when assigning workflow task
Issue Upon assigning a single-approver workflow task, users encounter a 404 error page. The following stack trace is recorded in the logs: ERROR Unable to process portlet...
How to set up OpenOffice/LibreOffice integration in a Docker environment
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I am running Liferay through Docker and I would like to enable the...
Issue with DynamicQuery for KaleoInstanceToken and DDMFormInstanceRecordVersion
Issue Below error was encountered while trying to use the 'Dynamic Query' in custom code: ERROR [http-nio-9090-exec-9][DynamicQueryFactoryImpl:83] Unable find model...
Eclipse / Liferay IDE: "Failed to read schema document" URL when creating JNDI connections for Spring Portlets
Issue When creating JNDI connections using Spring, Eclipse / Liferay IDE users may encounter the following error: "Failed to read schema document 'http://www.liferay.com/schema/lrjee/liferay-jee.xsd', because 1)...
'Unable to write temporary file' when uploading large LAR files
Issue After uploading a LAR file, a message "The file <filename>.lar cannot be imported: Unable to write temporary file" is displayed Environment DXP 7.3, DXP 7.4, Quarterly Releases Resolution Liferay...
Different behavior if you call a non-existing jpg or a gif
Issue A user tries to open a non-existing file with the documents path For example: localhost:8080/documents/abc.jpg or localhost:8080/documents/abc.gif The user will get a "Not Found" Page but it is not the same for...
Rest API to perform web content structure Import and Override
Issue Does Liferay provide any Rest API that can be used to save exported JSON of structures into Liferay DB, like the option "Import and Override" in Structure tab of Web Content? To be more precise, imagine a simple use...
Unable to add documents to folder with workflow
Issue When attempting to create a new Web Content and selecting the "Link" option within the "Content" field, if a folder with an active workflow is chosen, the portal restricts the addition of documents to that...
Web Content Structure is unresponsive when making a selection
Issue The Web Content & Structures field is not operating as expected when changing values. Create a structure with a Select from List. Export it to JSON. Change the value of Select from List to comma-separated words...
DDMStorageAdapterSaveRequest has no possibility to distinguish between final Form Sending and Auto-save event
Issue I am using a custom form storage adapter which calls an external service when the form is submitted. I noticed that in combination with the auto-save feature of Liferay Forms, this results in repeated calls of the...
"Link to URL" parent page can't have a "Link to URL" child page
Issue After creating a "Link to URL" parent page, the ability to create a "Link to URL" child page is not available. This functionality used to be available, but isn't available anymore. Environment DXP 7.4...
Upgrade to 7.4: DDMFieldUpgradeProcess takes an awfully long time
Issue We are upgrading to 7.4 and noticed that the upgrade process is working a lot at DDMFieldUpgradeProcess, this part seems to be taking a very long time Environment upgrade to 7.4 Resolution This is known. It happens...
Object creation fails with the error "400 Bad request Someone may be trying to circumvent the permission checker"
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue When I try to create new objects, I receive the following error...
Database throughput problems due to queries to the AssetEntry table executed by the assetEntryLocalServiceUtil.getEntries method
Issue We have a custom development that calls the assetEntryLocalServiceUtil.getEntries method: AssetEntryQuery assetEntryQuery = new AssetEntryQuery(); assetEntryQuery.setAnyCategoryIds(new long[] { categoriaMesVistos...
Log messages for Stored XSS vulnerabilities
Issue We would like to know whether there are any strings to search for in log files, to check if any of the following vulnerabilities have been exploited in our environment? LSV-1237 / CVE-2023-42628 LSV-1236 /...
Getting 'DuplicateSamlIdpSsoSessionException' in the Debug Logs
Issue Users are facing intermittent login issues in the SAML environment; however, the below error is observed frequently in their log files: DEBUG [default task-73687][BaseSamlStrutsAction:61] null...
Error 403 - App not assigned
Issue We received this error:  Error 403 - App not assigned - Sorry, you can't access Support because you are not assigned this app in Okta. If you are wondering why is this happening, please contact your...
'Segments' option under the 'People' section in the Product's menu not coming
Issue User has created a site template, but are unable to view the 'Segments' section under 'People' in the Product's menu. Environment Liferay DXP 7.4 Resolution Liferay provides site templates for...