Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Where can I see image details in the Headless API response for Vocabularies?
Issue I cannot see image details for Categories in the Headless API response upon calling /o/headless-admin-taxonomy/v1.0/taxonomy-categories/{{categoryId}} Environment Liferay 7.4 Quarterly Releases...
String ¿¿¿¿¿¿ is displayed in several Web Contents after upgrading
Issue After upgrading, some Web Contents are displayed with the string ¿¿¿¿¿¿¿. Environment Quarterly Releases: 2023.Q3, 2023.Q4, 2024.Q1, 2024.Q2, 2024.Q3 Resolution The string ¿¿¿¿¿¿ is codification of the...
When a virtual instance is created via a headless API, the admin user's email address changes
Issue When a virtual instance is created via a headless API, the admin user's email address changes. Environment 2024.q2.2 Resolution Update to 2024.q3+ or implement a portal property as a workaround: Set...
Spring Framework 6 and JDK 21 Compatibility with Liferay DXP
Issue There is a need to upgrade the application to Spring Framework 6 due to security vulnerabilities in Spring 5.x. Is Spring 6 compatible with Liferay DXP 7.4 or later patches? What is the exact version...
What is the use of XML files in logs folder?
Issue Users can find two sorts of files in the liferay-dxp/logs folder .log and .xml. What is the purpose of XML log files? Environment Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution XML log file...
Error when projecting a clob field in a DSL query with an Oracle database
Issue Given the following DSL query: DSLQuery testQuery = DSLQueryFactoryUtil.select(ddmfaTable.largeAttributeValue) .from(ddmfTable) .innerJoinON(ddmfaTable,...
'OutOfMemoryError' during PDF preview generation
Issue  Application nodes frequently crash. The following error appears in the logs: ERROR [liferay/document_library_pdf_processor-1][PDFProcessorImpl:795] java.util.concurrent.ExecutionException:...
Glowroot Access for Non-Admin Users
Issue The user encountering an issue with accessing Glowroot using roles other than administrator. Here are the steps performed: 1. Started the server using the command: ./catalina.sh glowroot run 2. Navigated to...
The per-virtual instance portal properties file feature has been removed
Issue The per-virtual instance portal properties file feature is deprecated. Files such as  portal-[companyId].properties will no longer be considered The JVM property -Dcompany-id-properties=true is also no longer...
REST Builder fails after upgrading to DXP 2024.Q1.5
Issue: We have observed that the REST Builder is failing after upgrading from DXP 2023.Q4.4 to DXP 2024.Q1.5, and the following error occurs: The liferay.workspace.docker.image.liferay property is...
Can we enable a prompt for asset removal?
Issue Currently, there is no confirmation message before we remove assets (web contents, documents etc) asking us if we really want to do it This could lead to accidental deletions which of course can be...
Unable to disable Email Verification in the Control Panel Instance Settings
Issue When attempting to uncheck the "Require strangers to verify their email address?" option under Instance Settings → User Authentication and clicking Save, the setting reverts to being checked.  Environment Quarterly...
Configure Rate Limiting in Apache for Liferay Forms
Issue How to prevent users from submitting a form too frequently (e.g., more than 10 times in 10 seconds) in a custom MVC portlet. Environment Liferay DXP 7.4 Resolution Configure rate limiting directly in the...
Why is Javascript utilized more than HTML in Liferay, given that it has an influence on site performance?
Issue Why is the Javascript percentage high as compared to the HTML percentage in Liferay, which should be vice versa in any application if someone wants their sites to be crawled by Google? As per the GSC (Google...
Null captcha text in a custom development using liferay-captcha taglib
Issue After adding the captcha taglib in a custom JSP, for example: <liferay-captcha:captcha url="${captchaURL}" /> CaptchaUtil.check(actionRequest) is returning an error since CAPTCHA_TEXT is null....
WAR Deployment Issue with Java 17
Issue I'm seeing the following error when deploying a war portlet that was compiled using Java 17: ERROR [fileinstall-directory-watcher][DirectoryWatcher:988] Unable to start bundle:...
When will Liferay support JBoss EAP 8?
Issue Do you have plans to support JBoss EAP 8 for the Liferay Quarterly Release? Environment Liferay Quarterly Release Resolution We still have not indicated or planned the exact Quarterly Release where the JBoss EAP...
Marketplace License Does Not Appear On Our Account and Purchased Apps Not Visible
Issue We purchased a perpetual license to the RTG Survey Portlet, but it seems that it's no longer attributed to our account. As the marketplace has changed significantly since we last had to re-issue a license key,...
"Single Node (Memory Clustered)" type of jobs are not scheduled
Issue When restarting the Liferay portal, the job schedulers are not auto-scheduled in a Single Node (Memory Clustered) environment. Expected result: Next Run Date will show an actual date Actual result: Next Run...
Can Liferay integrate logs with SIEM?
Issue Is it possible to integrate Liferay's application log entries with a centralized logging system like SIEM(Security Information and Event Management)? Environment DXP 7.4 Resolution SIEM integration may be possible...