Issue
I have created a custom site/organizational role to see Document and Media contents. I only selected VIEW options in Define Permissions > Site Administration > Content > Documents and Media, but the user is able to add documents/folders which is undesirable behaviour.
Environment
- Liferay DXP 7.0+
Resolution
Since the Test User is a part of the Site/Organization, which the custom role belongs to, they automatically inherit the “Site Member” role, that includes additional permissions. It turns out that this issue is caused by the site member having “add” permissions on the home folder in Documents and Media.
To change the behaviour, please perform the following steps:
- While signed in with an admin account, navigate to the Control Panel > Content & Data > Documents and Media
- On the Documents and Media page, click the three dots in the upper right corner and click “Home Folder Permissions”
- Deselect all “add” permissions for the row “Site Member” (except “view“), and the Test User should no longer be able to add folders, etc. to Documents and Media