Legacy Knowledge Base
Published Jun. 30, 2025

Why are Guest users able to edit Rich Text fields within a form?

Written By

Isaac Wilson

How To articles are not official guidelines or officially supported documentation. They are community-contributed content and may not always reflect the latest updates to Liferay DXP. We welcome your feedback to improve How To articles!

While we make every effort to ensure this Knowledge Base is accurate, it may not always reflect the most recent updates or official guidelines.We appreciate your understanding and encourage you to reach out with any feedback or concerns.

Legacy Article

You are viewing an article from our legacy "FastTrack" publication program, made available for informational purposes. Articles in this program were published without a requirement for independent editing or verification and are provided"as is" without guarantee.

Before using any information from this article, independently verify its suitability for your situation and project.

Issue

  • We created a form with a Rich Text field, but we see that guest users can edit the content in the Rich Text field (including the source).
  • How do I disable the user/guest from being about to edit the text in this form field? We do not want guests to have access to the editor.

Environment

  • Quarterly Release
  • DXP 7.4

Resolution

  • Rich Text fields are intended to be leveraged when user input is required; as such, it is expected for users to be able to edit pre-filled content of a Rich Text field before submitting a form.

Additional Information

  • If a field needs to contain static text (as entered by the form creator, without the ability for users to enter data), the intended field type to use instead is a Paragraph field
  • If there is a business use case that requires this to still be a Rich Text style field, another option is Writing a Custom Form Field Type, which can be similar to the existing Rich Text Field.
    • If this should only be displayed to logged in users, it’s possible to use the Liferay.ThemeDisplay.isSignedIn() variable to conditionally render the React component, as shown in the following example that would be added here:
      if (!Liferay.ThemeDisplay.isSignedIn()) {
      return null;
      }
  • More information can be found in this Form Field Types Reference article

 

Did this article resolve your issue ?

Legacy Knowledge Base