Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Unable to define user in a Workflow Definition by identifier other than user-id
Issue When writing a Workflow Definition, I want to specify a user to receive a Workflow notification by an identifier such as screen-name or email-address. However, when I attempt to define the user by these...
Is it possible to leave alt text empty for a required image of a Web Content Structure?
Issue As a content creator, I would like to leave the alt text empty of an image which is set as required by the corresponding Web Content Structure. This would allow screen readers to skip reading the image...
Cannot create folders in Forms section
Issue I need to create folders to organize my Forms, as I do in Web Content and Documents and Media, but I can't find this option. Environment Liferay DXP 7.x Resolution This functionality does not exist yet in the...
Tooltip Messages appear twice when hovering over icon
Issue User sees tooltip messages appearing twice when hovering over various icons (i.e. help icon) throughout the portal.  Environment DXP 7.2 GA1 to Fix Pack 9 Resolution This behavior is caused by a regression bug and...
Can I add custom permissions through resource-actions/default.xml in a Liferay JS widget generated by Liferay JS Generator?
Issue After generating a JS widget through the Liferay JS Generator, there won't be an apparent way to leverage custom permissions, like it's possible through the resource-actions/default.xml file in a...
Internet Explorer 11 appends the "zx=" parameter to the URL
Issue DXP administrators and users may notice a zx= parameter appended to the URL while navigating through the pages of the portal. For example: http://localhost:8080/web/guest/page2?zx=5ml8zs91pgxm Environment...
Unable to save Instance Settings modifications
Issue When I make some configuration change in instance settings and click save, the page breaks (menus are gone) and the changes are not stored. In the logs I see a stacktrace is thrown, with parts like these:       ERROR...
Receiving no 'View Usage' count with embedded web content after deploying a custom theme
Issue The usage count in 'view usages' does not change when the web content is embedded through the theme Steps to reproduce Create 'Site' Create 'Content Pages' Create 'Web Content' Copy the friendly URL of the...
Cannot provide non-admin roles access to view and manage Workflow Definitions
Issue I want to assign the permission to view and manage Workflow Definitions under Control Panel > Workflow > Process Builder to non-admin roles. However, when I try to add these permissions, I am unable to access and...
After performing a security configuration, our users can no longer add Categories in Web Content
Issue After applying the workaround indicated in this Security Advisory LSV-545: Unauthenticated Remote code execution via JSONWS (CVE-2020-7961), every client-side web service call to the JSONWS-API is failing:...
"JSON text did not start with array or object and option to allow fragments not set" error on Liferay Screens iOS-SDK
Issue When trying to login on Liferay-iOS-SDK Screenlet on a DXP 7.0+ project, the operation will fail, throwing the below error: "LoginScreenlet | Failed to log in: Error Domain=com.liferay.mobile.sdk Code=1 \...
Key Points while creating a 'Theme'
Issue Key Points that can be noted when creating a new theme in order to avoid issues. Environment Liferay 7.2 Resolution In preferencesMap, values must be Strings, String[], or a Collection<String>. group_id is of...
The Refresh CAPTCHA option does not work
Issue The Refresh CAPTCHA button in the form seems to be disabled, it does not respond. Environment Liferay DXP 7.2 Fix Pack 6+ Resolution Please install Liferay DXP 7.2 Fix Pack 9+ Or request a Hotfix with...
Unable to create IDP in SAML configuration with error “java.lang.RuntimeException: java.lang.NullPointerException”
Issue Unable to create IDP in SAML configuration with error “java.lang.RuntimeException: java.lang.NullPointerException” 2021-01-08 18:31:29.437 DEBUG [default task-193][SamlAdminPortlet:74]...
Is it possible to search for web content across all sites within an entire Liferay bundle?
Issue In Liferay DXP, it is currently possible to search for documents, media, and other associated web content within individual sites, is it possible to to conduct these types of searches across all sites within...
Can I access the configuration variable in a JS widget created with liferay-js:adapt?
Issue Following Adapting Existing Apps to Run on Liferay DXP, after re-adapting a pure JS project (React, Angular, Vue) to become a Liferay JS widget with the liferay-js:adapt command, there will be no...
Workflows Missing After Upgrade to DXP 7.1+
Issue I've performed an upgrade to DXP 7.1+, and I noticed that I have a fewer number of workflows in my upgraded environment.  When taking a look at the workflows that were present in the environment prior to the...
Unable to display web content preview in Site Administration
Issue When trying to display a web content preview through the web content admin portlet: Administrators may notice various issues: The preview does not load at all The preview loads, then disappears The preview...
Hide Content Page Fragments from Search Results
Issue I want to exclude fragments on a Content Page from Search Results. Example Use Case: Having a footer fragment in each Content Page that contains the company's contact information. I do not want to include the...
Elasticsearch 7.10 breaks Workflow Metrics in DXP 7.3 GA1
Environment Liferay DXP 7.3 GA1 Elasticsearch 7.10+ Symptom When Liferay DXP 7.3 is configured to connect to Elasticsearch 7.10, navigating to Applications Menu > Workflow > Metrics and selecting a workflow entry...