Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
How to create a default translation for editable fields in a fragment
Issue We have some fragments similar to the one below <button> <span data-lfr-editable-id="text1" data-lfr-editable-type="rich-text"> ${languageUtil.get(locale,'exit')} </span> </button> We are trying to set the...
How to create a role-based user to only view and update web content?
Issue How to create a role-based user to only view and update web content? Environment Liferay DXP 7.3 Resolution Navigate to Control Panel >Users and Organizations > Create a user After this, navigate to the...
ColumnHeader repeated in xls/CSV file after exporting the report from Liferay Report app
Issue ColumnHeader repeated in xls/CSV file after exporting the report from Liferay Reports app. For example: Environment Liferay DXP 7.4 + Liferay Reports App Resolution This is defined in the Jasper report definition...
Search suggestions not coming for guest user in the search bar
Issue Search suggestions related to the commerce products not showing to the guest user but is working for logged-in user (using blank site template). Environment DXP 7.4 Resolution This behavior is fixed...
Page does not appear in the sitemap widget
Issue Some of the pages created in site builder are not visible on the sitemap widget. Sitemap widget is dropped on a content page. Environment Liferay DXP 7.4 Resolution Navigate to Site Menu > Site...
Published web content has document URLs changed
Issue  We added page numbers to many of our document links. When this content is displayed you can click on the document links with page numbers and it will open the document to that page. When Published to Live,...
The language settings in the site settings are reflected in the language selector on the Terms of Use screen.
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us....
Editing a field in a fieldgroup is not working as expected
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue When you make a change in a fieldgroup that is being...
Vulnerability in CKeditor 4.18.0
Issue In Liferay, a vulnerable version of CKEditor 4.18.0 is being used. The vulnerability CVE-2023-28439 is present in the CKEditor versions less than 4.21.0. Environment Liferay DXP 7.0+ Resolution The observed...
Unable to add Calendar event when setting "Display Scheduler Only"
Issue Add a Calendar widget on the page Enter the Configurations for the widget Switch to Display Settings tab and select Display Scheduler Only option Unselect the 2 other options and Save Click Add Event button in...
Nested Azure AD Groups are not assigned to Liferay groups
Issue You want to assign Liferay user groups via dynamic Azure AD groups when logging in with SAML. For this, certain rules of Azure AD groups are in place based on your needs. There might be an issue where nested...
Troubleshooting Performance Issues in Liferay PaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Performance issues can manifest in various different symptoms,...
Broken master page template after importing LAR file between environments
Issue When importing a .lar file between environments, when accessing the Master Page, a 404 error is displayed and the page is not displayed Environment DXP 7.4 Resolution This behavior is an error identified in the...
The database service went offline briefly causing downtime
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue The database service went offline briefly causing downtime...
Inconsistency of the user's LoginDate in the exported CSV file
Issue Getting inconsistent user login date format in CSV file after exporting the users. Steps to reproduce: Add the last login date to the portal-ext.properties file, and reference the article for the same:...
HTTP/2 Rapid reset attack mitigation in Liferay PaaS (CVE-2023-44487)
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue If you are using HTTP/2, nginx and below tomcat...
NullPointerException/PortletDataException reported when importing lar file
Issue NullPointerException/PortletDataException was reported when importing lar file. The issue can only be reproduced in certain environments with older JDK versions. 15:45:15,910 ERROR [BackgroundTaskMessageListener:182]...
Differentiate multiple Identity Provider when click on the Sign-in button
Issue How the user can login to specific IDP when multiple IDPs are configured on the portal? Environment Liferay DXP 7.0 Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution While using...
Commerce: checkout address drop-down not showing all addresses
Learn more: Search Result Limit with Elasticsearch: Mitigating "Result window is too large." errors with index.max_result_window Issue When user checks out, in the shipping address drop-down some addresses cannot be found...
Form Cannot Save Due to Size
Issue When trying to save a large form, the following error is pushed out, "The Page was not displayed because the entity was too large." This is common for environments that are using a V1 Web Application Firewall...
Is SELinux compatible with Liferay DXP 7.4?
Issue Is SELinux configuration compatible with Liferay DXP 7.4? Environment Liferay DXP 7.4 Running on one of the supported Operating Systems Resolution It is possible to set up SELinux to work with Liferay DXP 7.4 It is up to...
The code view is visible at the bottom of the content section
Issue In the web content, when selecting the 'Code View [</>]' of the content section, the code view won't display, but, if users scroll to the bottom, the code view is visible. Steps to reproduce: 1. Start Liferay...
Disabling Guest users from viewing the search page
Issue How do I block access to my search page content from the "Guest" user in my Portal I would like guest users to be able to access public pages but not have permission to search my web contents history Environment...
Lots of "JSONArray text must start with" DEBUG messages in logs, thrown by DDMFormFieldOptionsFactoryImpl
Issue "JSONArray text must start with" DEBUG message are written to the logs when some Liferay Forms operations are carried out. 2023-09-14 11:34:05.180 DEBUG [http-nio-8080-exec-40][DDMFormFieldOptionsFactoryImpl:214]...
Highlighting search keyword in Liferay Search
Issue For complete word search, the highlighting of search keyword is fine but when we are searching for half word search, then it is either not highlighting the keyword (even if the keyword is present) or showing no...
Is it possible to create page templates globally to use them throughout the site?
Issue When trying to create page templates in the global site, not all the options of this tool are displayed, but when performing the same action on any other site, it does display all the options and works...
Getting the value of an object Entry within Liferay platform
Issue I see there are two ways to get Data from Liferay Objects ObjectEntryLocalService Rest Api Calling Liferay Api externally outside Liferay platform will be using Rest Api What if I need to get the value of an object...
Insecure Cross Document Messaging
Issue Cross Document Messaging (also known as Web Messaging) introduced the postMessage() method, with which plaintext messages can be sent cross-origin. It consists of two parameters: “message”, and...
Issue accessing friendly URL containing special characters in upper case
Issue After updating the portal from DXP 7.3 U15 to DXP 7.3 U27, we cannot access friendly URLs containing special characters in upper case. We see the following error: The requested resource could not be found...
Liferay Product Cookies
This guide indicates the Liferay products which generate cookies in order to assist Liferay administrators with data privacy compliance. Each entry should indicate the name, type, duration, and purpose. Any personal...
Actions menu duplicated in Documents and Media portlet after migration from 7.0 to 7.4
Issue After an upgrade from 7.0 to 7.4 actions menu (three vertical dots) in Documents and Media portlet is duplicated. Environment Liferay DXP 7.4 Resolution Before the upgrade, in 7.0 some entries in the...
ADA Accessibility - I expect the Tab key focus to be visible for all elements when editing the Home page
Issue Expected Result: The keyboard Tab key focus should be clearly visible for all the interactive elements on the page. Actual Result: The keyboard Tab key focus is not visible for all the elements in the main...
ADA Accessibility - I expect Screen Reader focus not to navigate to blank spaces when using the Tab key
Issue Expected Result: When using the Tab key to navigate, Screen Reader focus only goes to areas which have visible text or content, not visibly blank spaces. Actual Result: Screen Reader Focus is landing on...
java.lang.StackOverflowError while deploying Liferay service caused by getSuperLocale
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue This error could occur in Liferay PaaS environments,...
Is it possible to assign a site template to an already existing site?
Issue When we have already created a site, can we assign it a site template?  Environment DXP 7.0 + Resolution It is not possible as site templates should be used during site creation. Site Templates serve to...
Web content links do not open when "Data Acquisition Method : Manual" is set in the Asset Publisher widget
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us....
The Liferay PaaS memory usage does not match what is shown in the Liferay Service Shell and in the Admin Console
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Please be aware that the page you are viewing has been...
ADA Accessibility - I expect the Home page to be keyboard accessible when zoomed to 400%
Issue Expected Result: I expect the Home page to be accessible via keyboard when the page is zoomed in to 400%, and for the left navigation panel to collapse when zoom is applied. Actual Result: The left...
BasePanel class does not have setPortlet method
Issue Post Upgrading Liferay DXP 7.2 to DXP 7.4, the user tries to upgrade their custom code which uses the BasePanel class. Below error is encountered while trying to deploy the code The method setPortlet(Portlet)...
Data Provider fails to provide data for a text field
Issue I am trying to fill a text field using the DDMRestDataProvider and the Autofill Rule. I was inspired by the following article:...