Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Files in the document_library folder are owned by the root user
Issue After executing the portal with the Linux root superuser, some files and folders in the $LIFERAY_HOME/data/document_library folder are now owned by the root user and can't be accessed by the...
CounterLocalService.fetchCounter" does not exist in DXP 7.2 or later versions.
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us. Issue...
Product specifications are not getting created if not available on the portal
Issue When specifications are not available on the portal. It's giving 500 Internal Server Error in the response body while creating the product via headless API. Steps to reproduce: 1. Create a product by using...
Product status is not updating by using Patch API
Issue PATCH API is not updating the status of the product workflow. Steps to reproduce: 1. Create a product via headless API( request is attached). 2. Check the status of the product in UI ( It's showing as draft...
Page .lar exports are failing to be imported due to a "DuplicateVocabularyException: A category vocabulary with the name topic already" exists
Issue Page .lar exports from one 7.3 environment are currently failing to be imported in a separate 7.3 environment due to the following error:  DuplicateVocabularyException: A category vocabulary with the name topic...
Disable/Stop the immediate login post resetting the password
Issue How to disable/stop the immediate login post resetting the password and want users to redirect to the login page. Environment Liferay DXP 7.2 Resolution The default functionality of Liferay is to log...
Old auditing data taking up database space
Issue Are there any alternative methods to manage audit data? Environment DXP 7.3   DXP 7.2 Resolution As an alternative to saving all of the logging data into the database, instead, we may choose to save it to a...
"Unable to extend the HTTP session" WARN logs
Issue These warnings are frequently found in the logs:  Unable to extend the HTTP session. or Unable to extend the HTTP session. Review the portal property "session.timeout" if this warning is displayed...
Establish an external data source using JNDI
Issue Sometimes there is a requirement to use data sources other than Liferay DXPs. To do this, the data source can be configured via JNDI data source or JDBC properties. Any database other than Liferay DXP's...
Error handling LOB columns
Issue We have developed a custom entity using Service Builder. One of the tables defines a LOB column. When we try to insert a record in that column we get following database exception:...
Audit modules is not starting after upgrade
Issue After upgrading from Liferay Portal 6.2 to Liferay 7.2. The following audit module error is appearing. 2020-11-05 10:07:14.615 INFO [Start Level: Equinox Container:...
INFO log traces with STARTED/ STOPPED information are not displayed when deploying a module if using WildFly/JBoss version 22.0.0 or higher
Issue When a module is started or stopped, there is usually a log trace of level INFO showing that information. However, when using the application server WidlFly/JBoss with version 22.0.0 or higher, these traces are...
Product status is not changing via headless APIs
Issue If the product is created via headless API with workflow-enabled. The status of the product is in a 'draft' state rather than a 'pending' state. Steps to reproduce: 1. Assign a default workflow to Commerce...
Troubleshooting java.lang.NoClassDefFoundError/java.lang.ClassNotFoundException
Issue java.lang.NoClassDefFoundError or java.lang.ClassNotFoundException on portal startup only. Environment Portal containing custom modules including optional dependencies. Resolution Review the deployed...
Subfolder webcontent is not fetched with headless API
Issue Step to Reproduce: 1. Create three basic web content. 2. Create a folder with two basic web content inside it. Now, total web content is 5 including. 3. Navigated to http://localhost:8080/o/api 4. Executed the...
Layout permissions lost upgrading from 6.2 to 7.2
Issue After the upgrade from 6.2 to 7.2, several Layout permissions have been changed. Some pages restricted to the user Guest are accessible after the upgrade. There are rows in the ResourcePermission table with the...
Intermittent performance issues caused by Journal Articles Display
Issue After installing dxp-16, intermittent performance issues are being seen Thread dumps taken during the performance issue show a number of threads with a similar format: at...
StaleObjectStateException for RedirectNotFoundEntryImpl
Issue The StaleObjectStateException is appearing in logs for RedirectNotFoundEntryImpl. 2022-02-08 05:36:36.385 ERROR [https-jsse-nio-8443-exec-157][I18nFilter:62] org.hibernate.StaleObjectStateException: Row was...
Starting nodes concurrently can lead to incorrect module upgrades
Issue Module functionality seems to fail after moving to a newer fixpack. After executing a system:check unsatisfied dependencies like the following appear: Component with ID 58 is unavailable due to missing...
Some pages do not display properly when HTTP Strict Transport Security (HSTS) is configured.
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us. Issue...