Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
LOGOUT event is not added to Audit Table
Issue LOGOUT event is not being audited when SAML SLO is enabled. Environment Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution This happens because LogoutPreAction and LogoutPostAction classes do not get...
liferay-module-config-generator as a dependency
Issue As a developer, should I add liferay-module-config-generator in the block dependencies or in the block devDependencies? Environment Liferay DXP 7.1 Resolution This module is thought to be used in the block...
EXT module override is not being applied in 2023.Q3.3+ from ${liferay.home}/osgi/marketplace/override
Issue Adding an EXT module override in ${liferay.home}/osgi/marketplace/override no longer functions. Environment Liferay DXP Quarterly Release 2023.Q3.3 and later releases Resolution To workaround this behavior for the...
POST call to /v1.0/sites/{siteId}/site-pages returns UnsupportedOperationException
Issue When trying to add a page via headless API using the POST endpoint /v1.0/sites/{siteId}/site-pages, UnsupportedOperationException is returned. Environment Liferay DXP 7.4 Quarterly Release Resolution  This API...
Workaround for deprecated Liferay "Forms" headless API
Issue The Liferay "Forms" headless API is deprecated. It is discussed in detail here: https://liferay.atlassian.net/browse/LPS-125528 The users could still want the functionality that was provided by these endpoints....
NoSuchResourceActionException when navigating to Orders admin page
Issue When navigating to Applications Menu → Commerce →  Orders, the following error is thrown by the Liferay log: ERROR [http-nio-8080-exec-9][SearchPermissionCheckerImpl:159] null...
Different total count of items when creating an export and import process over same site
Issue We are exporting site contents in a lar file. When checking the number of items in the export, we've seen some values. When we try to import this lar in another site, we are detecting that the number of...
Backup service permission error: does not have storage.buckets.get access
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Backup service is not working properly and the...
Error persistenceField is null when building portlet for Quarterly Release versions
Issue When trying to build a custom portlet for a quarterly release version, the build fails with the following error: persistenceField is null Environment com.liferay.gradle.plugins.workspace version is less than...
WebDAV authentication with username and password has not been working since 2023.q4
Issue Until version 2023.q4 (excluding), the standard authentication (using username and password) to connect to WebDAV worked correctly. Since this version, such authentication has been disabled. Environment 2023.Q4...
user_ .modifiedDate table changes upon User Login
Issue When a user logs in, Liferay is changing the user_ .modifiedDate value in the database table.    Environment Liferay 7.4   Resolution The behavior where user_ .modifiedDate field is modified upon User Login has...
Documents Modified date changes if documents are moved between folders
Issue If we move documents between folders their Modification date is updated even if the document itself has not been modified. Environment Liferay 7.3+ Resolution The actual behavior is expected and a...
How to enable ModSecurity and Check if it's Working (Liferay PaaS)
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue How to enable ModSecurity in Liferay PaaS and test...
Getting blank pages after 10k entries in Account Listing
Learn more: Search Result Limit with Elasticsearch: Mitigating "Result window is too large." errors with index.max_result_window Issue Users are getting a blank page after 10k entries on the account listing UI...
Price Range Facet is not working with account price
Issue The Price Range Facet widget filters results based on a product's lowest price. However, the users have created the base price and price list separately for their products, so that their guest users can only...
Open ports - Port Number 80 and 443 are in open state
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Port Number 80 and 443 are in open state. Having port 80...
Licensing Issues with iText PDF Library
Issue We need to understand that "Does the iText license come bundled with the Liferay License or needs to be procured separately?". Environment Liferay DXP  7.2 Resolution There is no license included for...
Slow build times when compiling a React Portlet
Issue After setting up some libraries in package.json, like mui, the build time is longer than expected. Environment DXP 7.0, 7.1, 7.2, 7.3 DXP 7.4, Quarterly Releases Resolution In most cases, this...
Caches for Widget Pages and Content Pages
Issue There is not an easy way to know how many caches are, which their lifetime is, and how they can be cleared. Environment Quarterly Releases: 2023.Q3, 2023.Q4, 2023.Q1 Liferay DXP 7.3, 7.4 Resolution Widget Pages...
Error "Someone may be trying to circumvent the permission checker" when deleting a virtual instance
Issue When attempting to delete a virtual instance, users may encounter the following error: javax.portlet.PortletException: com.liferay.portal.kernel.exception.SystemException:...
'${processor.processMax()' error while creating Application Display Templates
Issue In the application display templates, whenever try to create an asset publisher template, the below error appears on the UI: The error appears in the Liferay logs as well: ERROR [WebContainer :...
Deployment failure due to invalid Environment Variable name
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue The deployment process failed with the following error...
PortalUUID: 'cannot find symbol' in Service Builder module
Issue When trying to build my Service Builder module, the following error is thrown in *PersisenceImpl.java classes: cannot find symbol PortalUUID *PersisenceImpl.java classes contain the following reference:...
Portal.properties link not up to date
Issue I am looking at the link https://docs.liferay.com/dxp/portal/7.4-latest/propertiesdoc/portal.properties.html  to inspect the default portal properties, but it doesn't seem to be up to date. For example, some...
Error "The SSL certificate does not match the SSL private key"
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue The deployment process failed with the following error...
The link received (via email) after form submission is prompting Guest User to Login
Issue Is it possible for a guest user to directly access the link received in the email notification (after form submission) without doing the login? Environment Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP...
Set a wrong WebId causes "Unable to get company ID" after upgrade.
Issue After upgrade from DXP 7.3 to 7.4 the following error is displayed: 2023-10-24 17:28:16.854 ERROR [SCR Component Actor][ROOT:47] bundle com.liferay.portal.properties.swapper:5.0.24...
How to check item display permissions
Issue If the container folder (JournalFolder) of a web content does not have VIEW permissions for Guest, the contents are not seen if we are not logged in. This was different in 7.2. What has changed?...
Regarding the definition of privileges for roles, there are some items that are not reflected.
Please be aware that the page you are viewing has been machine translated from Japanese into English and may contain some translation errors. If you observe any issues with the translation, please contact us....
After enabling LDAP authentication, administrator users who do not exist in LDAP can log in
Issue We have enabled LDAP authentication, checking it as required and we have unchecked Ignore User Search Filter for Authentication. With this configuration applied the administrator users can login even if...
Uploading Synonym Sets in Bulk
Issue Is there any way to upload Synonym sets in bulk (via any sheet or other way) at once rather than manually entering them one by one? Environment Liferay DXP 7.4 Resolution Currently, there is no ootb...
Changes to SEO page options resets custom theme
Issue Making any changes to the SEO robot options resets the custom theme, any imported font, and the favicon.  Steps to Reproduce: Add a custom theme, favicon, and google font to the page configurations,...
Performance problem when uploading a new file having a high number of pages
Issue Users may experience significantly slow upload times when uploading a new file to a site that contains a high number of pages. Environment Liferay DXP 7.4 Resolution The issue is addressed by LPS-202905....
Exception executing batch [java.sql.BatchUpdateException: data exception: string data, right truncation ; size limit: 75 table: COMMERCEVIRTUALORDERITEM column: URL]
Issue Virtual Product URLs can contain only 75 characters Steps To Reproduce 1. Create a Minium 2. Money Order is enabled 3. Create a Virtual Product with a price 4. Into the URL, put something that contains more...
Web content's category is added in the page source
Issue When we add a category to a web content and view it, the page source contains the category's name as a meta element Is it intended? Environment Liferay DXP 7.0+ Resolution The behavior is intended,...
Asset Publisher Template for the Web Content Display is unusable after deleting owner of the content
Issue After deleting a user from the portal, content created by it gets inaccessible if trying to edit with the specific user tag on Asset Publisher. Environment Liferay Portal 6.2+ Resolution Liferay does...
Allow more flexibility in setting up URLs
Issue Is there any availability of a friendly setup of URL when a display page template is used, by default the platform sets the "/w/" in the URL for all contents using display page templates, and personalization...
Default permissions for a new page to avoid revealing page information
Issue It would be wonderful if default page permissions could be configured on a site level, and in addition, if guests do not have view permission for the page it would not appear in the sitemap even if the...
Remote tax calculation option is displayed
Issue The remote tax calculation option is displayed Steps to reproduce: Create a new Channel using Minium Open the Global Menu and Navigate to Commerce > Channel View the Tax Calculations section Expected...
Paragraph fragment doesn't display mapped text field's line breaks
Issue We created a structure with a text field and put multiple lines in the web content After that, we added a Paragraph fragment to a page and mapped the web content's text field to it, it displays the...