Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Duplicate account details are visible to user
Issue The admin user needs to place an order on behalf of B2C and B2B customers who have different accounts. While impersonating users simultaneously in the same browser, duplicate account details are visible....
Virtual product order status and tax
Issue Require the following with the virtual product: No need for user personal data and would like to remove it for checkout. The order status should moved to completed status directly after the payment....
Why is Jenkins build failing with SynchronousResumeNotSupportedException?
Issue We are facing an issue where the builds are failing and we are getting the below error:  org.jenkinsci.plugins.workflow.steps.SynchronousResumeNotSupportedException: Resume after a restart not...
Why do I experience slowness after Liferay 7.4 2023.q4?
Issue User experiences a slowness in the Liferay 7.4 Q1+ while they check the below query: SELECT COUNT (*) AS col_0_0_ FROM PortletPreferences portletpre0_ WHERE (portletpre0_.ownerType = ?) AND...
Is there any risk to remove the SystemEvent table entries while using Staging?
Issue I would like to remove all entries from the SystemEvent table using the approach from this article. Environment Liferay DXP 7.0+ Resolution The Site Deletions must be published before the property...
Click-to-Chat Bubble Disappears When Navigating to Other Pages
Issue Click-to-Chat bubble disappears if I change to a different page. The page needs to be reloaded for the click-to-chat bubble to appear. During conversation in click-to-chat bubble, the conversation...
Creating and Editing a Web Content Structure in Partitioned DB Results in Error
Issue Creating and Editing a Web Content Structure in a Virtual Instance in PaaS or a database partitioned environment results in an error like below ERROR [http-nio-8080-exec-1][BundleSiteInitializer:635] null...
Workflow Tasks Are Missing History
Issue After approving a document, I'm not able to see if it was previously approved or rejected. In previous versions of Liferay DXP, users could see the entire history of a task assigned to them in the...
The Impersonation Attempt Fails Without Errors in the Logs or UI
Issue Admin users are unable to impersonate other users. When attempting to impersonate, a new tab opens, but it remains on the original user. Impersonation attempts fail, the `doAsUserId?` is missing from...
How do you create a role that allows a user to edit details of other users?
Note, this is just one method and can be tailored to different preferences. Issue How do you create a role that can edit the details of other users? Like email address, etc. How do you create and assign a...
How Will Special Characters Be Scoped Regarding LPS-78008?
Issue Will special characters be scoped at site level and not only instance level per LPS-78008? Environment Quarterly Releases  Resolution After further review, it has been confirmed that LPS-78008 will not be...
Longer Team Names Fail to Word Wrap and Overlap the Description
Issue When creating a long team name, the name overlaps the description of the team. Steps to reproduce: Start a vanilla 2024.q1 bundle Navigate to Menu > People > Teams > + Create a long team name using...
On authentication types to Azure Blob Storage
Issue We would like to use Azure Blob Storage for documents and media, as described at https://learn.liferay.com/web/guest/w/dxp/system-administration/file-storage/other-file-store-types/microsoft-azure-blob-storage...
I cannot add a name for my display template
Issue When I create a new widget display template there is no option to define the key name as we could do in previous versions, like this: Environment Liferay 7.4, Quarterly Release Resolution You need...
How to define user and email notifications for each asset
Issue I want to disable email notifications for blogs How to configure notifications for each asset to receive them by email or as user notifications. Environment DXP 7.4 Resolution It is possible to choose the...
"You do not have the required permissions" while assigning workflow tasks
Issue The user is receiving an error "You do not have the required permissions" when one user assigns the workflow tasks to another user. When checked further, the task assigned by one user to another user is...
Gradle tasks not working for new versions
Issue We are trying to update our workspace, to do so we have performed the following actions based on a blade init: Update gradle-wrapper version to 7.3.3 Set in settings.gradle file for...
Hardcoded link resulting in 404 error
Issue I have a hardcoded button to a web content that is now going to a 404 page. My link to Liferay content is now breaking. Environment DXP 7.4 Quarterly Release Resolution Hardcoding links to Liferay content can break...
Unable to filter by relationship using Postgres in neasted levels
Issue When filtering data based on relationships with nested levels using PostgreSQL, we encountered an internal server error with the following log entry instead of a status 200: 2024-04-18 13:43:33.147 ERROR...
Is Liferay vulnerable to CVE-2023-50164?
Issue After running a scan, we received an alert about a possible vulnerability in Liferay. We want to confirm if we are vulnerable to CVE-2023-50164. Environment All environments. Resolution Liferay is not...
Uncaught TypeError in the DXP Homepage (PageTree)
Issue If a role does not have admin access, but can access the Site Menu, PageTree toggle console errors.  Certain roles that have access to edit web content see an error in the browser console log....
Parent organization membership is also displayed
Issue We found a bug with how organization membership is displayed on the user account page: when a suborganization is assigned to a user, the parent organization of the assigned suborganization is also...
Error: Could not find or load main class com.liferay.css.builder.CSSBuilder
Issue After switching to JDK11 I'm unable to build my project. Build failed with an exception that lists a path to my java version. Error: Could not find or load main class...
After copying the data to the Message Board, the numbered list not continuing
Issue Copied the data from the Word file, pasted it into the Message Boards's Thread, and published it. After publishing the Thread, the number list is not continued and shows like: 1. a. 1. a. 1 a. Steps to...
Uploaded document's file extension not visible in the URL
Issue While uploading the documents in the 'Documents and Media' section the file extension is not showing in the URL. Example: In Liferay 7.4 update 24, uploaded the document in the 'Documents and Media' section,...
The users imported from LDAP cannot change their password
Issue The users who were imported from LDAP cannot modify their passwords from My Account. Environment All Liferay DXP environments Resolution Make sure that LDAP Export option is enabled. Ensure that the credentials...
A user group imported from LDAP is not removed from Liferay when the related group is removed from LDAP
Issue Removing a group from LDAP does not remove the related user group imported in Liferay DXP's database. Environment All Liferay DXP environments Resolution This is the intended behavior. The user group has to be...
Enable/Disable Multi-Factor Authentication
Issue If there is any problem related with the way two-factor is working or do you simply want to deactivate it for some reason. Environment Liferay DXP 7.4 2023 Q1 - 2023 Q4 2024 Q1 Resolution There are two...
How to properly scale up Search nodes?
Issue How to properly scale up Search nodes instead of deleting the Search service and deploying it again? Environment Liferay PaaS Liferay DXP 7.4+ Resolution Following the Liferay Cloud Upgrading to a...
Unable to minify CSS in commerce sites
Issue Steps to reproduce: 1. Start Liferay DXP 7.2 fix-pack-20 (commerce site) 2. Add the below properties in portal-ext.properties: minifier.enabled=true theme.css.fast.load=true javascript.fast.load=true 3....
Is there a maximum number of calls to the headless API before performance degrades?
Issue Is there a maximum number of calls to the headless API before performance degrades? Environment Liferay SaaS Liferay PaaS Resolution We cannot specify a maximum number of calls that would avoid performance issues....
Vulnerability on spring-web
Issue The security scanner flagged the Liferay with the security vulnerability due to the JAR containing the vulnerable classes, reported here CVE-2016-1000027. Environment Liferay DXP 7.4 Resolution It's been...
Known Issue [Resolved]: "Unit of measure key is mandatory" error when submitting a Commerce order via API
Issue After creating a product with all required details and mapping a Unit of Measure (UOM) to that product, while creating the order using the POST /v1.0/orders API listed on...
In web Content Structures, Calendar in Date Picker Field does not display properly
Issue When using a Web Content structure containing the Date Picker field and clicking on the calendar in the date picker field, the calendar is not displayed completely, and requires scrolling.  Environment Quarterly...
Search doesn't return enough results
Issue When searching for a file such a Web Content.jpg, searching for partial matches (such as We Content or Web Conte) or the file name without the extension doesn't yield the file in the search results Environment...
Content does appear correctly for 'Site Member' users even though permissions appear correct
Issue We have a 'Web Content' set up as visible for 'Site Member' users. This 'Web Content' is under a hierarchy of folders. We added a 'Web Content Display' widget to show the 'Web Content'. The widget is also set...
Deactivating Autogenerate Structure Key generates IDs
Issue I  browse to Control Panel -> System Settings -> CONTENT AND DATA -> Web Content -> SYSTEM SCOPE -> Administration and uncheck 'Autogenerate Structure Key' option. Then I create a new Web Content Structure...
Where is the place to define default values for Web Content Structures in DXP 7.4 ?
Issue In Liferay 7.1 we had defined default values for fields in our Web Content Structures. After migration to Liferay 7.4 we do not see any place to define default values while creating or editing Web Content...
Tabs created in Webcontent body field are not clickable in content management system
Issue Created tabs are not clickable in 2023.q4.0 editor where as the same tabs were working correctly in Liferay 7.2 editor. Environment 2023.q4.0 Resolution In DXP 7.2, the editor utilized was AlloyEditor. However,...
Search result description does not include text from Web Content Display Widget located within Widget Page.
Issue Steps to reproduce: Create a Web Content. Create a Widget Page. Add a Web Content Display Widget to the Widget Page. Configure Web Content Display Widget to display the Web Content. Create a Content Page. Add...