Issue
-
When logging in as an administrator and impersonating a regular site member (with non-elevated permissions), all records are shown instead of just the records of the Site Member.
- However, when using Objects to create a form where users can enter a number of entries using the Object's widget, regular site members are able to add/edit/update/delete their own records, but not see other users entries; only Administrators have access to all records.
- I expect an impersonated user to have the same access as the actual user, not the access of the administrator.
Environment
- DXP 7.4
Resolution
- Request a hotfix from Support including LPS-155958
Additional Information:
- For more information on form permissions: https://learn.liferay.com/dxp/latest/en/process-automation/forms/creating-and-managing-forms/forms-permissions-reference.html