Issue
-
Steps to Reproduce:
1) Create a Site called HR
2) Create a Private page called Documents
3) In the Document's Page drag and drop Document and Media (Image-1)
4) Click on Document and Media Configuration and check Show Actions (Image-2)
5) Save the Settings
6) Go to Roles and Create a role with the name Viewer and give the following permissions (Permissions are only view) (Image-3)
7) Now create a user called Viewer, Assign HR Site and Viewer Site Role (Image-4)
8) Login with viewer user
9) Click on + button on Document and Media, there is an option to upload the documents (Image-5)




Environment
- Liferay DXP 7.3
Resolution
-
This is the expected behavior because the user is inheriting those permissions from Site Member.
However, if you do not want Site Member to be granted permissions by default, you will need to customize the permissions and write customization to revoke already granted permissions to Site Member.