Capability

Security

Liferay DXP is built with security in mind. A variety of standards based authentication methods and integrations can be used to ensure secure access to a site and its resources. Robust role-based access control with permissions gives you fine grained control over what authenticated and unauthenticated users can access, share, or edit. Liferay DXP’s web services also have a multi-layered and configurable approach to security and authorization.

Feature
Deployment Approach
Restrict drag and drop for multiple images in blogs
Issue Why is there no error or warning while selecting multiple images to upload via drag-and-drop functionality? If it is not uploading multiple images, then it should not select multiple images in the first...
How to delete old audit events 'audit_auditevent' table in 7.2+.
Issue I want to clean up the AUDIT_AUDITEVENT table in a 7.2+ instance, because the old data is taking up too much space. However, the API made after 7.2, and the previous methods of clearing the 'audit_auditevent' ...
How to verify the current Implementation version of log4j.jar file
Issue We would like to verify the implementation version of a log4j.jar file, either to verify the application of an update or to assess current vulnerability.  Environment DXP 7.3, DXP 7.4 Resolution You can find the...
Deployment to Liferay SaaS ext environment is stuck when deploying with Command-Line Tool (lcp)
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue There have been reports about the Command-Line Tool (i.e.,lcp)...
Unable to delete an Account entry
Issue When navigating to Control Panel > Accounts, an existing Account entry cannot be deleted successfully. This issue can occur when the “Account” system object has a relationship with an inactive object. Environment DXP...
HTML Injection in the Classic Search Portlet (Legacy)
Issue Our security tool identified HTML Injection issue. Reproduction Steps: 1. Start up Liferay DXP 7.4 Update 62 2. On the home page, add a widget "Search". 3. In the address bar, enter the URL...
Orders list page contains Add/Edit option for the users having only view permission
Issue If the user creates a custom regular role with some permissions, such as view permissions for the order list, the user will also be able to access the edit or add options. They can also edit the option in the...
LCS is reporting Unable to validate the environment token file
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue In a Liferay PaaS environment, the Liferay service is printing the...