Legacy Knowledge Base
Published Sep. 10, 2025

How to Remove Owner Role Permissions?

Written By

Tímea Bihari

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • We have users who had Site Admin role on one of their Sites and created a Page/Asset.
  • After we revoked their Admin role (but not the Site Membership, so they can still access the Site), they continue to have full edit/delete rights to the Page/Asset tehy created as the Owner role grants these permissions.

 

Environment

  • DXP 7.3+
  • Quarterly releases

 

Resolution

  • This behavior is expected in Liferay. When a user creates content, they are assigned the "Owner" role with full permissions regardless of their other roles. This dynamic role remains even if the user's other site roles are modified or removed.
  • It is possible to remove Owner permissions manually on the individual Pages (or any other assets). See for example this article:

    After a web content owner loses his membership of a site, he can still edit all the previously authored web content

  • If you would like to modify permissions for more Pages/Assets, a custom script could be used at your own discretion. Liferay does not offer an out-of-the-box functionality to remove these permissions programmatically.
  • As a best practice, consider using dedicated administrative accounts. For example, give a user named "User A" a separate administrative account "User A Admin" to perform admin tasks. Disabling the admin account removes owner permissions from content created under that account.
  • In DXP 2025.Q1 and later releases, Page Owners can be modified in the UI under Page Settings. This does not retroactively affect existing Pages, nor other content types such as Web Content. See Setting Default Permissions for more information.
Did this article resolve your issue ?

Legacy Knowledge Base