After changing the password, site members are not redirected to a page where they don't have the guest view permission

Issue

• After changing the password, site members are not redirected to a page
  • Steps to reproduce:
    1) Start the server, login as Admin
    2) Create a new page e.g. /testpage and remove the VIEW permission for the Guest user on it
    3) Create a new user e.g. user1 and, in the Memberships tab, make it a member of the Liferay DXP site, save it.
    4) Set a new password for it, however, please ensure the 'Require Password Reset' checkbox is selected, save it.
    5) Open incognito and hit this URL in the address bar: http://localhost:8080/web/guest/testpage
    6) A Login prompt will appear, enter with user1 and the initially set password
    7) Liferay will prompt to choose a new password, pick one and proceed
    8) Liferay will prompt to choose a reminder question and answer, pick them and proceed
    Expected Behavior: user1 to be redirected to http://localhost:8080/web/guest/testpage
    Actual behavior: user1 will be redirected to

    http://localhost:8080/web/guest/home?
    p_p_id=com_liferay_login_web_portlet_LoginPortlet&p_p_lifecycle=1&p_p_state=maximized&p_p_mode=view&refererPlid=34428&_com_liferay_login_web_portlet_LoginPortlet_javax.portlet.action=%2Flogin%2Flogin&saveLastPath=false&_com_liferay_login_web_portlet_LoginPortlet_redirect=%2Fweb%2Fguest%2Ftestpage&p_auth=M1wwzUCM 

  • Errors appear in the Liferay console as:

    WARN [http-nio-8080-exec-1][SecurityPortletContainerWrapper:393] User xyz is not allowed to access URL http://localhost:8080/web/guest/home and portlet com_liferay_login_web_portlet_LoginPortlet: User xyz must be authenticated

Environment

• Liferay DXP 7.1
• Liferay DXP 7.2
• Liferay DXP 7.3

Resolution

• The observed behavior is a known bug that has been addressed in the following DXP fix packs:
  
  • Liferay 7.3 fix pack 1
    Liferay 7.2 fix pack 9
    Liferay 7.1 fix pack 5

Additional Information

• If a hotfix is required, please create a support ticket requesting the hotfix by attaching the patch details.
• Installing Fix Packs and Hotfixes on Liferay DXP will guide you to install the Fixpack/Hotfix in your environment.
• LPS-121766