Issue
- Users from an Organization without View permission to see other Organization information are able to do so even after setting everything up properly.
- The steps for this issue should look like this:
-
-
-
Create Organizations called Org1 and Org2
-
Create Accounts called Account1 and Account2 and associate them to Org1 and Org2 respectively.
-
Create users called AccountMgr1 and AccountMgr2 and assign them the Account Manager role on Org1 and Org2 respectively.
-
Create new Regular role called AccountRole1 Role Manager and assign AccountMgr1 to the role.
-
Create a new Account Role called AccountRole1. Update the permissions on that role so the AccountRole1 Role Manager role can View and Assign Members.
-
-
Environment
- DXP 7.4 U55+
Resolution
- If after following the steps, you are able to reproduce the behavior and would like to have a fix, please request a hotfix from Liferay Support with LPS-173628 added to it.
- Upgrading to the latest version of 7.4 should address this as well.