Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Changing the default Mail Domain in DXP
Issue In Liferay DXP, is it possible to configure the default email domain used during user creation? We'd like new users to have email addresses ending in "@example.com" instead of "@liferay.com". Resolution Go to...
Polyfill.io Vulnerability: Is Liferay affected?
Issue An attribute polyfill:true is observed in the source code of the website. Does it have anything to do with the domain 'https://polyfill.io'? Is Liferay affected by the Polyfill.js vulnerability? ...
Document status is not getting updated in search indexes
Issue Unable to update the document status in the search indexes. Steps to reproduce: 1. Start the server. 2. Deploy the JAR file. 3. Navigate to the Control Panel > Custom Fields. 4. Add 2 custom fields,...
Captcha does not appear on each submission attempt in the form
Issue Create a form by enabling the CAPTCHA and submit it for the first time, try to submit it again, then the CAPTCHA will not appear. Steps to Reproduce: 1. Start the server. 2. Navigate to the Site Menu >...
Unable to see the list of assignees for Site Roles, Organization Roles, Asset Library Roles and Account Roles
Issue I would like to access a list of Roles and Assignees for "Site Roles", "Organization Roles", "Asset Library Roles", and "Account Roles" without having to go through each individual account to get...
Upgrade Fails: Error after upgrading using the Database Upgrade Tool (MS SQL Server)
Issue After running `db_upgrade_client.bat` my upgrade failed with no explanation in the logs. Upgrade failed, when it was attempted again it was successful but Liferay won't start After upgrading, Liferay...
Facing issues in setting 'liferay.workspace.product' property for Liferay Workspace
Issue Upgrading the portal from Liferay DXP 7.4 Update 67 to Liferay DXP Quarterly Release 2024.Q1.9 and trying to set 'liferay.workspace.product = dxp-2024.q1.9' in the gradle.properties however, it is not...
Can you add a theme or fragments to action pages?
Issue How do I add fragments to action pages like /c/portal/update_password and /c/portal/update_reminder_query? Our theme reverts on utility/action pages /c/ When a user is taken to the...
Is Elasticsearch 8.14.x or 8.15.x compatible with Liferay DXP Quarterly Release?
Issue The compatibility matrix does not list newer releases of Elasticsearch, like 8.14.x or 8.15.x, are they compatible? We've been made aware of CVE-2024-23445 and CVE-2024-37280, can we upgrade to...
Canonical urls for commerce products
Issue Canonical URLs work correctly for pages in different locales, however, users want the same for their products so that the correct canonical tag is displayed for their product based on the page locale....
Unable to access product specifications via guest user
Issue Users need to access product details via a headless admin API but through guest users (unauthenticated requests). However, users could use 'Service Access Policies' for this; though, even after adding the...
Image preview not displaying for AVIF format
Issue Images in AVIF format cannot be previewed in Documents and Media Steps to reproduce 1. Startup Liferay 2. Setup and enable ImageMagick (with HEIC support) 3. Navigate to System Settings > Adaptive Media >>...
Known Issue [Resolved]: Products with a UOM configured and discounts updated via API unexpectedly display per-base-unit net price
Issue After applying a discount to a product (with a UOM configured) via the POST v1.0/skus/by-externalReferenceCode/{externalReferenceCode}/sku-unit-of-measures headless-commerce-admin-catalog API, the discounted...
Unable to configure Liferay to use Okta groups for authorization due to missing Feature Flag
Issue While trying to configure Liferay to use Okta groups for authorization when following the instructions here, Importing User Groups’ Memberships from an External IDP through SAML, there’s a mention of...
All Custom Fields are not viewable in the Control Panel
Issue When adding more than 25 attributes, only 20 are viewable. Steps to reproduce: Control Panel > Configuration > Custom Fields > User Add more than 25 attributes by clicking on "New" Observe that only 20...
Multiple

tags on the Home page editor

Issue Users want to improve SEO performance by ensuring that each page contains only one H1 tag. However, they noticed that '<h1 class="hide-accessible">Navigation</h1>' appears on all pages, thus this has to be a...
lastPublishDate showing as NULL
Issue 'lastPublishDate' column is showing as NULL in 'DLFileEntry' table. According to the use case, users need to show the last publish date of the document. Environment Liferay DXP 7.3 Liferay DXP 7.4...
Liferay 7.3 Update36 not available on CDN
Issue We are planning to upgrade product to version dxp-7.3-u36, but noticed that it's currently unavailable on CDN product_info.json Environment DXP 7.3 Resolution Since the introduction of the Quarterly Releases, it...
A simple example and key factors to check when testing custom OAuth 2.0 applications
Issue You have created an OAuth 2.0 application and would like to set up the minimum configuration to be able to test it. This article provides a simple example that could be adapted to your needs....
The portal is not reindexing because Elastic Search has reached the maximum number of shards.
Issue When attempting to reindex the portal, the process fails, and the following messages are displayed in the logs: Validation Failed: 1: this action would add [1] shards, but this cluster currently has...
Web Content Not Showing as `Translated`
Issue After creating a web content in English, then selecting a new language and translating the content, we're able to publish, but the content remains untranslated. We created a sample web content and...
Unable to upload blog images after upgrading to 2024.Q1.1
Issue After upgrading to 2024.Q1.1, I no longer have the option to upload blog images within a blog post. This was implemented due to a potential security vulnerability with actors being able to upload offensive or...
Download Liferay Quarterly Releases Using the Linux Command Line
Issue I want to download Liferay using the Linux command line rather than going through a web browser. Environment Liferay DXP Quarterly Releases Resolution Liferay offers a release directory that can be downloaded...
How to programmatically add a form entry with API?
Issue I am currently working with a Liferay form. I am attempting to submit a new record to this form using the /ddm.ddmforminstancerecord/add-form-instance-record API via JSON Web Services (JSONWS). This API requires a...
All out-of-the-box Liferay Job Schedulers stop working if one job scheduler is incorrectly configured
Issue Setting the interval to -1 for scheduled jobs is allowed by the UI, but causes an array of issues. Steps to reproduce:  Start the server and login as an administrator. Open Application Menu from top right...
How to create a read-only field in a form
Issue When you are creating a form, sometimes you want to create a field that is read-only because, for example, it is automatically populated by taking information from an API or a database, and you don't...
After an upgrade, some fragments get broken because JS strict mode seems to be enforced now
Issue We do not declare JS variables when developing fragments. After an upgrade, these fragments stop working properly. Environment Upgrades to the following Patch Releases: 2023.Q3.5+, 2023.Q4.1+ Upgrades to 2024.Q1...
Receiving multiple notification when clicking on 'Done' button multiple times in workflow
Issue Getting multiple notifications in the workflow when clicking on the 'Done' button multiple times when assigning the task 'to me' or to the user in the slow network. Steps to Reproduce: 1. Start the server....
Is it possible to filter the Account Selector search results to exclude fields?
Issue I would like to add a filter to the Account Selector fragment so that it excludes selected matching fields from the search results. For example, I would like to exclude any results with Account IDs that...
Error appears in Liferay logs when "Members" Widget is added to a blank site
Issue When adding a "Members" widget to a new page, on a blank site, the following error appears in the Liferay logs: ERROR [http-nio-8080-exec-6][ComboServlet:412] Skip...
After an upgrade and database migration, old theme is not being replaced by new theme
Issue After an upgrade, a new theme developed to replace an old theme is not applied to pages that utilized the old theme. There are multiple pages with different theme settings and updating them one-by-one is...
Why is Zendesk Chat Provider missing after upgrading to a Quarterly Release?
Issue If you configured Zendesk Chat Provider in an earlier version of 7.4, you may notice that it is missing in Instance Settings after upgrading to a Quarterly Release Environment Quarterly Release Resolution The...
Unable to read the content for custom_robots.txt file
Issue I am getting the following message in my log file: [RobotsUtil:47] Unable to read the content for custom_robots.txt However, the same does not happen in other environments. What can be the reason? Environment...
SecureXMLFactoryProviderImpl.class_blocked.pdf is not listed
Issue The user was unable to install a patch or hotfix, even after restarting the server and attempting with a vanilla instance, the following errors can be seen:  ERROR [Patcher:-1] The command has failed. Please...
Is it possible to use a hotfix when building my custom code?
Issue I have been provided with a hotfix, and I want to compile my custom code using that hotfix from my Liferay Workspace. Environment Any Liferay DXP version Liferay Developer Tools Resolution There is not an easy...
NoSuchGroupException: No Group exists with the primary key 0 when updating a Journal Article via service API
Issue When trying to update a Journal Article (i.e., a web content) using the service API  journalArticleLocalService.updateArticle( journalArticle.getUserId(), journalArticle.getGroupId(),...
What is the use of the Analytics Administrator user and role?
Issue After connecting to Analytics Cloud (AC) there's an Analytics Administrator user with the Analytics Administrator regular role. What is their use? Environment Liferay DXP with Analytics Cloud Resolution The...
Unable to Edit Document with a Name Not Including a File Extension
Issue We cannot edit a document's properties if the document name does not contain a file extension and here are the steps we took: Navigate to Control Panel > System Settings > Documents and Media Change the value for...
Is it possible to map non-basic user attributes with SAML?
Issue Can non-basic user attributes(e.g. jobTitle) from an Identity Provider(IdP) get mapped to their respective fields on the Service Provider's User_ table? Environment 2024.Q2 Resolution Currently, LDAP can only be used to...
Unable to restore backups in Liferay PaaS
Issue When attempting to restore a backup to the Liferay service, the backup appears to be restored successfully, but there is no document library that appears associated with the Liferay service The following error...