Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Known Vulnerabilities with Liferay AntiSamy
The following issue may compromise the security of your Liferay Digital Experience Platform implementation.  Vulnerability Information The Liferay AntiSamy app depends on third party libraries that have known...
Asset publisher can't order web contents if the display language is different
Issue We have web contents made from a custom structure with a particular default language We want to display them in the Asset Publisher sorted by one of the structure's fields, but the order is wrong if...
A non-friendly error message appears in the logs when trying to create a new user through API with a firstName that is longer than allowed
Issue Trying to create a new user via API with a longer than allowed firstName produces a non-friendly error message in the logs Reproducing steps Start Liferay and go to Control Panel > Server Administration >...
Web Contents are not accessible through Headless Api after a full reindex
Issue In case of large web contents executing the reindex all search indexes operation can throw the following warnings: 2021-07-27 06:46:39.595 WARN ...
The size of the user_ table's firstName field should be increased
Issue The size of the firstName (75) field of the user_ table should be increased since it sometimes prevents the creation and access of certain users in an environment. Environment Liferay DXP 7.0 Resolution In...
Developer Studio suddenly crashes
Issue Developer Studio closes by itself after some time with an OutOfMemory error or without any errors at all.  Environment Developer Studio 3.9.3 JDK 11.0.8 Resolution This problem can be experienced when...
Headless Delivery API - Filtering structured content
Issue Making use of our headless delivery API you can retrieve all your web contents but sometimes we might want to filter them according to different business requirements, like getting only those web contents...
Trace about Reflection.getCallerClass is not supported when executing Patching Tool
Issue When you try to use the Patching Tool (for example, the command patchingtool.sh info), you get an error similar to the following: 2021-07-16 06:41:48,143 INFO sun.reflect.Reflection.getCallerClass is not...
Avoid or allow that some applications can be dynamically displayed in a page
Issue The permissions system for an application (portlet) includes a security check when the application is going to be displayed in a page. Normally, the users should not be able to see applications if the...
Category filters are not working for search results
Issue Steps to reproduce the issue: 1. Create a site using Minium Template. 2. Go to the catalog page of the site. 3. Select, Engine or any category from CATEGORY facet. Expected Result: Only 11 Products are...
Field data is disabled on text fields by default
Issue IllegalArgumentException is occurred when trying to run vanilla instance with commerce and search functionality is not working properly in Catalog Page. Text fields are not optimised ERROR...
What permissions are needed to edit content pages?
Issue What permissions does a role need to edit content pages, including adding, configuring and deleting widgets and fragments in it? Environment Liferay DXP 7.2, 7.3 Resolution There are a handful of basic...
How to obtain the binary logs?
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue How can we access the database-related binary...
Changing the date format in Liferay Forms
Issue I would like to change the date format of the Date Field in the Liferay Forms, it should be dd/mm/yyyy instead of mm/dd/yyyy. Environment Liferay DXP 7.2+ Resolution The Date Format of the Date...
Can I use O365 integration if Liferay is in DMZ?
Issue Liferay DXP is deployed on DMZ environment i.e. it will not have access to Internet in this case, can we integrate Liferay with Office 365? Environment DXP 7.2+ Resolution No, it will not be possible to use this...
Form field values are not saved when translations are added
Issue Steps to reproduce: 1. Start Liferay with Commerce installed. 2. Go to Content > Forms > Element Sets 3. Add a new element set 4. Add a text field to the element set 5. Add any translation to the element...
Discount with specific account is not applied
Issue While assigning the discount to particular account, it is not getting applied Steps to reproduce 1. Create a Minium test site. 2. Create vocabulary named "ipdc" and create one category named "Gold...
Cache-Control header in static resources is missing when running Liferay from Developer Studio
Issue Cache-Control header is not present in static resources when running the portal from Developer Studio and setting com.liferay.portal.servlet.filters.header.HeaderFilter=true property in...
Why a big .lar import, using SQL Server database makes the Liferay system unreachable?
Issue The Customer has initiated a big .lar import, and during the actual import-process the system cannot be accessed. Environment Liferay 6.2 Liferay 7.0 Liferay 7.1 Liferay 7.2 Liferay 7.3 Resolution For...
Module projects cannot be created outside a Liferay workspace
Issue Before, I was able to create a module project outside a Liferay workspace. However, now I see a warning that I need a Liferay workspace: Environment Liferay Developer Studio Resolution This is an intentional change...
Why does the language of web content remain unchanged after translation?
Issue Why is the web content still displayed in English (en-US) translation after changing the portal language to Hindi (hi-IN) translation? Environment Liferay DXP 7.2  Resolution Since this behavior is expected,...
The Backup Service's restore functionality will not accept TGZ files in the file uploader
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I am encountering the inability to upload a database or volume TGZ...
Message Board Portlet can publish empty threads
Issue The Message Board portlet publishes before a post is completed. Using the Message Boards portlet:  When the 'Subject' field has focus, if the ENTER key is pressed, the thread is published before the 'Body'...
When submitting forms, is it possible to send email notifications to multiple users?
Issue Is it possible to send notifications to multiple email addresses when a user submits a form? Environment DXP 7.0 DXP 7.1 DXP 7.2 DXP 7.3 Resolution Yes, when enabling Form notifications, an administrator can send...
Can the cart store items independently for each Store?
Issue The use case is a marketplace (B2B2C) scenario. In that marketplace, there are multiple EC sites under the umbrella. There are cases where a user starts shopping at Store A, putting Store A items in a cart,...
How can a Liferay admin set the article-Id manually?
Issue How can a Liferay admin set the article-Id manually? Environment Liferay 7.0 Liferay 7.1 Liferay 7.2 Liferay 7.3 Resolution Start a vanilla Liferay bundle. Navigate to Control Panel --> Configuration...
Replacing NTLM SSO with Kerberos in Liferay Portal 6.2
Issue NTLM SSO protocol has some vulnerabilities addressed by Microsoft in CVE-2020-1472 (external link), forcing to use the secure RPC connection. See also How to manage the changes in Netlogon secure channel...
Configurations for embedded portlets are not updated when deploying an updated theme
Issue I have a theme with an embedded portlet that I have deployed and applied to a site. I updated the configurations of the embedded portlet and deployed the updated theme to the site, but I do not see the updated...
Importing LDAP users with the same email address
Issue I want to import LDAP users that have the same email address, but the import fails due to an error about a duplicate email address: 2021-08-02 16:53:47.766 ERROR [https-jsse-nio-4443-exec-13][LDAPAuth:432] Problem...
Are Commerce Products searchable as digital assets with the normal (non-commerce) Search Results widget?
Issue Blogs, Web Content, Wiki, etc. all participate in the CMS as digital assets. Have Commerce Products the same behavior? Environment Liferay Commerce out-of-the-box Resolution Commerce Products are digital...
Does an upgrade to a new Liferay Fix Pack include the upgrade of Tomcat version?
Issue Do we need to upgrade the Tomcat version when we upgrade to a Liferay version? Environment Liferay DXP 7.2 Resolution A Fix Pack doesn't change the Tomcat version, it only patches Liferay that was...
Headless API call returns 404
Issue When calling a Liferay method in headless delivery API, it returns 404, or an empty list. Example: "/v1.0/sites/{siteId}/document-folders" results in { "status": "NOT_FOUND", "title": "No Folder exists with...
How to select a web content article in a JSP
Issue  is there any documentation to select a Journal Article (Web Content Article) from a particular folder in a custom jsp? Environment DXP 7.2 Resolution There is a framework and API for doing that, actually with any...
After applying the hotfix, the warning 'properties modified in the future' shows
Issue After the installation of the hotfix, the following warnings might appear on the Liferay console. INFO [main][BaseDeployer:871] Deploying admin-theme.war Warning: WEB-INF\liferay-plugin-package.properties...
Permission for products by catalog
Issue In our use case we have several channels and catalogs and some groups of people managing specific channels and catalogs, so they cannot see channels they are not supposed to. We need to mark the user to only...
Nmap report several ports as open despite not being marked as external in LCP.json
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue After performing a port scan with https://nmap.online...
Landscape print layout is missing in Chrome, Edge
Issue Selection of landscape layout is not available in Chrome/Edge printing (CTRL+P) as only portrait mode is available. Environment Liferay DXP 7.0+ Google Chrome or Microsoft Edge Resolution The issue is only...
Is it possible to copy or pause an Experience?
Issue When creating and managing an Experience, there don't seem to be options to copy or pause an Experience, as the current options I see are only to create an Experience from scratch or fully delete it (which throws away...
Unable to upload file bigger than 10MB with ClamAVSizeLimitException after enabling Antivirus
Issue Unable to upload a file bigger than 10MB after enabling antivirus with the following error in the log 2021-07-19 08:35:43.476 ERROR [http-nio-8080-exec-9][PortletServlet:119] javax.portlet.PortletException:...
There is no pagination option for selecting the 21st place or higher range folder
Issue There is no paging or search option found. As a result, it is unable to select a folder as the Root Folder if it is in the 21st or higher position. Steps to reproduce: Navigate to Global Site Go to document...
liferay-ui:asset-categories-selector shows an empty list
Issue Using liferay-ui:asset-categories-selector returns an empty list in DXP 7.3, this selector worked in versions prior to DXP 7.3. Environment Liferay DXP 7.3 Resolution liferay-ui:asset-categories-selector is...
Associated users with Business account managing same Commerce Order
Issue Is possible to get every associated user with a B2B account has their own Commerce Order open? Environment Commerce 2.1 Channel type B2B. No Minium Theme installed. Resolution You should add the Account...
javascript.fast.load=true does not bundle all of the JS files into a single JS file
Issue Despite the javascript.fast.load property being true, a lot of JS files (starting with /combo) are still loading separately on the pages. Note: This property is true by default.  Therefore, a lot of...
Liferay Commerce, Products Widget: Pressing Browser 'Back' Button Loses Page Settings
Issue Using a browser's back button causes Commerce's Products Widget to lose both page placement and items per page configuration. Example Setup 1. From the Control Panel navigate to Commerce > Products 2. Change...
Liferay Commerce, Placed Orders Widget: Pressing Browser 'Back' Button Loses Page Settings
Issue Using a browser's back button causes Commerce's Placed Orders Widget to lose both page placement and items per page configuration. Example Setup 1. Complete 5 Commerce Orders 2. Go to the Placed Orders screen...
How Do the Search Suggestion Configurations Work?
Issue I am trying to configure a search Suggestion widget, and I would like to understand how the different configuration options function. Environment DXP 7.0 DXP 7.1 DXP 7.2 DXP 7.3 Resolution There are three...
Known Vulnerabilities with Liferay Fjord Theme and 1975 London Theme
The following issue may compromise the security of your Liferay Digital Experience Platform implementation.  Vulnerability Information The Liferay Fjord Theme and Liferay 1975 London Theme depend on third party...
Cannot run program "java" error when executing process to generate document previews
Issue When uploading or previewing images or documents that have not been previously loaded, the following WARN will be thrown. WARN [liferay/document_library_pdf_processor-1][BaseProcessorMessageListener:40] Unable...
Updating the database users in Liferay SaaS
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue We have created users who can access the database...
Channels are not visible under Visibility tab for custom roles
Issue Steps to reproduce 1. Create one product in minium site with specific catalog (i.e. Catalog "Sample"). 2. Set visibility of created product to speedwell channel . 3. Once the visibility is set, the channel...
Why Is My Search Suggestions Widget Only Showing Suggestions Part of the Time?
Issue I enabled the Search Suggestions widget and now spelling suggestions are showing up for some searches, but not for other identical searches. Environment DXP 7.0 DXP 7.1 DXP 7.2 DXP 7.3 Resolution Check the...
Reindex button remains at 0%
Issue You click in the "Reindex all search indexes" button but the progress bar is stuck in the 0% and the process is not executed Environment DXP 7.2 Resolution In some cases this is produced because a...
Edit Icon Not Showing Up After Upgrading to 7.3
Issue When upgrading from Liferay 7.0 or earlier to 7.3, existing Widget Pages do not show the Edit icon as observed when creating new Content Pages Environment DXP 7.3 Resolution Content Pages by default show the Edit...
How can we get a complete picture of a user's activity history?
Issue Is there a way to find out how and by whom a user was created? Environment Liferay DXP 7.2 Resolution The steps below can be used to track user activity. Log in by 'Test' user (Admin User) Create a new user...
Liferay Adaptive Media Installation issues
Issue When installing Adaptive Media 2.0.20 to Liferay DXP 7.0, it doesn't work, and the journal service override module described in the documentation doesn't work either.   Environment Liferay 7.0 DXP...
How to set up a Mail Server with DXP to receive email notifications?
Issue This article outlines how to set up a Mail Server and SMTP in Liferay DXP to receive emails. Environment Liferay DXP 7.3 Resolution Liferay DXP uses a mail server and SMTP to get email notifications. Liferay...
NTLM and NTLMv2 in Liferay Portal 6.2
Issue The question is whether Liferay Portal 6.2 supports NTLM and NTLMv2 Environment Liferay Portal 6.2 Resolution The library used in Liferay Portal 6.2 supports both NTLM and NTLMv2 There is a property that can...
Can a page created by a 'Link to URL' template be included in search results?
Issue When performing searches, we can see the pages created by 'Blank' or 'Widget page' template in search results. However, pages created with a 'Link to URL' template are not displayed. How can I include pages with 'Link to...
Repeatable web content structure items causes error and block publishing
Issue Reproduction steps: 1) At Product Menu / Configuration / Instance Settings / Miscellaneous add English (United Kingdom) from Available to Current languages and set it as the default language (this is required to...
Not able to delete rules in Product Publisher
Issue Steps to Reproduce: 1. Go to Speedwell Catalog Page 2. Add "Product Publisher" portlet on the page 3. Click on Configure. 4. Keep Dynamic Selection as is 5. Open Filter section 6. Add rule with Category and save....