Issue
-
Steps to reproduce:
1. Create portal-ext.properties with this property to disable SPA: javascript.single.page.application.enabled=false
2. Navigate Control Panel → Users & Organizations → Organizations → Add Organization → Name it & Save it.
3. Navigate Control Panel → Users & Organizations → Users → Add user → Fill in the necessary fields & Save it.
4. Navigate Control Panel → Users & Organizations → Organizations → Assign user to the organization created in step 1.
Expected result: The user is assigned correctly.
Actual result: The process simply froze and this WARN is logged:WARN [http-nio-8080-exec-1][SecurityPortletContainerWrapper:404] User 20123 is not allowed to access URL http://localhost:8080/group/guest/~/controlpanel/manage and portlet comliferayusersadminwebportlet_UsersAdminPortlet: User 20123 did not provide a valid CSRF token for com.liferay.portlet.SecurityPortletContainerWrapper
Environment
- Liferay DXP 7.4
Resolution
- The observed behavior is a known Liferay DXP bug which has been addressed in Liferay DXP 7.4 Update 81.