Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
MultiSearch Request solution for Liferay
Issue Liferay has no out of the box solution for handling MultiSearch Requests. Environment DXP 7.2 Resolution The Multi-Search API is exposed as a low-level API in Liferay Search's APIs through...
Unable to show journal articles
Issue We have some troubles when trying to show web contents. Scenario 1: Trying to show a web content in search results page. Some of the web contents in the search result show the error message "An error occurred...
Change the GUEST_LANGUAGE_ID cookie to expire Null
Issue The Guest language ID cookie in Liferay has a one-year expiration, whereas the undefined cookie in the F5 balancer caused the conflict. Is there a way to modify the Cookie's duration in Liferay? Environment...
dtSa cookies containing special characters
Issue As dtsa cookies are detected, are these cookies URLs cause for concern? Is there any information concerning these cookies in relation to Liferay? Use Case: As Liferay generated dtSa cookies contain the...
Document Library does not get deleted from the temp directory after re-indexing when using Amazon S3 Store
Issue Steps: Set up Liferay to use Amazon S3 Store Navigate to Site Administration > Content & Data > Documents and Media Upload several documents Perform a re-index of the instance Navigate...
How to enable CSRF Token in Liferay?
Issue How to enable CSRF Token in order to prevent CSRF attacks in Liferay? Environment Liferay DXP 7.2 Resolution Liferay's p_auth token protects against CSRF and is enabled by default. Here is the main...
Repeatable Geolocation field cannot be moved properly
Issue Steps to reproduce 1. Start Liferay 7.3 Bundle. 2. Create a new structure. 3. Add a geolocation field and set property to repeatable 4. Create new web content with the above created structure. 5. Repeat the...
How to configure the default timeout value to any value instead of having it capped at 500ms
Issue The default library timeout until Liferay DXP 7.2 fix pack dxp-3 is 250ms. The default library timeout since Liferay DXP 7.2 fix pack dxp-4 is 500ms.  Use Case: The user would like to be able to set/configure...
View permission for the "Guest" is not selected by default
Issue When we create WebContent, the permission for guest user is not selected by default. Steps to reproduce 1. Create new basic webcontent. 2. Before publishing, check the permissions of webcontent. 3. We see...
Instance level LDAP configuration
Issue When configuring LDAP authentication from DXP 7.3, the companyId has to be configured on an instance level. This issue can present itself for example during a CI / CD development. Environment DXP 7.3...
Custom Layout Templates shows source code in Nested Application Portlet
Issue Configure the Nested Application Portlet to appear with any of the custom layouts whenever it is used. Instead of the layout's rendering, the source code is shown. Steps to reproduce 1) Deploy the custom...
NoSuchUserException when setting email address in "To" field of Order Placed Notification Template
Issue When placing an order and having an Order Placed Notification Template with an email address in the "To" field, a NoSuchUserException is shown and the order can't be placed. Steps to reproduce: 1. Start a...
Portlet Id changes from Staging to Production
Issue ID of the portlet instance is different in the staging environment than in the real environment Steps to reproduce: Add a content editor portlet to a page. Go to staging. In staging: Edit "Configuration" Go...
A new version file is created for each slight modifications
Issue Is it possible to change the attribute of a file version without creating a new one? Environment Liferay DXP 7.0 Resolution Document and Media Portlet is designed to create a new file version whenever a file...
Liferay as SAML SP fails after switching the URL of the virtual instance
Issue SAML configuration hasn't been working since the virtual host of the portal instance changed. Caused by: org.opensaml.ws.security.SecurityPolicyException: Request was required to be secured but was not...
Data Providers are not published to Live
Issue A site under Staging has a form and a data provider ready to be published to Live. When publishing to Live, the form and the data provider are selected for publication. Result: The form is shown in Live but...
How to identify a Page Template using Freemarker
Issue I need to identify if the current page is a page template or not, using Freemarker from the applied theme. Is there a method similar to Layout.isPublicLayout() to achieve this? Environment Liferay DXP 7.2...
Runtime CSS minifier creates invalid CSS animation action
Issue  transition: background-color 5000s ease-in-out 0s; becomes transition: background-color 5000s ease-in-out 0; when minification is used. At build time, the CSS gets compiled, but at the run time, when...
7.4 styled custom themes not working properly
Issue When applying a styled based custom theme to a page in 7.4, header and other elements are misplaced and when you click the three elipsis button of a widget, options show up in the incorrect...
Saving the segment causes StackOverflowError in Elasticsearch
Issue Selecting a condition as parent organization in Organization segment contributor is not working when there are more sub-organizations Steps to reproduce: Create an Organization Create 1800-2000...