Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Enabling both Liferay's default login and SAML login so that users can use either option
Issue I would like to configure and enable SAML login while also having Liferay's default login available to users so that they can have two options for logging in. Environment DXP 7.4+ Quarterly Release Resolution...
Unknown system variable 'tx_isolation'
Issue After update database service to MySQL 8 in PaaS Liferay can not connect to database due to unknown system variable 'tx_isolation' error.  [dxp] WARN [main][PoolBase:452] HikariPool-1 - Default...
Empty search lists all the message board threads
Issue We created a few message board threads in the portlet and if we run an empty string search, all threads are displayed in the search result. Environment Liferay DXP 7.0+ Resolution This is the...
Creating a New User in Liferay Whenever a Liferay Object Entry is Added with Default Site, Role, and Password
Issue Creating a new user in Liferay whenever a new entry is created in the Liferay Object with a default Site, Role, and password? Environment Liferay DXP 7.4 Resolution In Liferay objects, object action defines...
Google Drive authentication randomly fails in a multi-node cloud environment
Issue Google Drive authentication usually works correctly, but sometimes it randomly fails with java.lang.IllegalStateException: Authorization oAuth2State not initialized errors in the logs. Google Drive was...
I cannot use the PUT method of the Object API's Batch endpoint with External Reference Codes (ERC)
Issue It is not possible to mass update a custom object's entries if: using the PUT method of the object's batch API endpoint and the External Reference Code (ERC) is given instead of the object entry's ID. The...
Query regarding special character (~) in the URL
Issue There is a special character (~) observed in the URL when navigating to site settings. Is this special character "~" a part of the URL design pattern of the product or is this is a security concern?...
Slow Content Search with SearchUtil API
Issue In 7.4 q2.12, searching using SearchUtil API is taking upwards of 3-4 minutes when the expected response is in milliseconds. Environment 7.4 2024.q2.12 Resolution Do one of the following: Upgrade to...