Search Results

All Results 65
Sort By
Resource Type
Applicable Versions
Deployment Approach
Capability
Feature
Service Organization Control (SOC) -1 Type 2 report
legacy
Issue Service Organization Control (SOC) -1 Type 2 report for auditing purposes. Environment Liferay DXP Resolution The SOC-1 report focuses on financial controls and their evaluation and this reporting is not applicable in the Liferay context. Therefore, Liferay does not make this type...
Time format displayed in AM/PM format instead of 24 hour
legacy
Issue Liferay displays Time format differently on the site's time picker than on the OS. Environment DXP 7.4 + Resolution This behavior is due to the changes of LPS-169277 where the old time picker has been replaced by a native time. Because of this the time picker will display the time...
What MySQL version is supported in Liferay Cloud?
legacy
Issue User wishes to know which MySQL version is supported in Liferay Cloud.   Environment Liferay Cloud Resolution Currently MySQL 5.7 is supported in Liferay Cloud. Additional Information MySQL  , content:...
Liferay's OpenID Connect implementation does not account for language variations for ui_locales
legacy
Issue Liferay's OpenID Connect implementation does not account for language variations for ui_locales. For example, Selecting English (United States) on Liferay sets ui_locales to en. Selecting Chinese (either Traditional or Simplified) sets ui_locales to zh. In this example, we would...
Automatic removal of onclick event from source of Web Content
legacy
Issue 1. When the below content is pasted in the source of Web Content, then the onclick event gets removed from the source automatically. Below is the original content: <div class="Small-ButtonRSecond"><button class="Rbtn" onClick="">Read&nbsp;More<i class="bi...
A blank SAML redirect screen is seen even with redirect message disabled
legacy
Issue A blank intermediary page (showing "Please select your identity provider" title and /portal/c/portal/login?redirect=%2Fportal%2F&refererPlid=[sanitized]&p_l_id=[sanitized] URL) is being seen even with the hotfix installed (with fix LPS-172619) and the...
Files uploaded with Guest view permission - Forms Upload field
legacy
Issue When a document is added in the Form Upload field it will have 'Guest view' permission. When a document is added directly in the Document and Media library it will NOT have 'Guest view' permission. Is there a configuration option where we can always disable 'Guest view' permission...
Security Issue: CVE-2024-28752 - Apache CXF
legacy
Issue Security vulnerability CVE-2024-28752 details a SSRF vulnerability with the Aegis DataBinding in versions of Apache CXF before 4.0.4, 3.6.3, and 3.5.8, which would allow an attacker to perform SSRF style attacks on webservices that take at least one parameter of any type. Users of...
Role with permission to view private page cannot view page without site membership
legacy
Issue Within a site with only private pages, a user who is not member of the site but has permission to access and view a private page via some regular role cannot access that private page. Environment Quarterly Releases: 2023.Q3, 2023.Q4, 2024.Q1 Liferay DXP 7.0, 7.1, 7.2, 7.3, 7.4...
How To Get Additional Search Metrics From Liferay
legacy
Issue Is there any other source of information where we could get additional search history information from Liferay or directly from Elasticsearch? How can we provide customers with metrics, beyond the top 5 search terms? Environment Liferay DXP Resolution With a Platinum License...
What does the TempFileEntriesMessageListener actually do?
legacy
Issue In our logs we see some errors apparently related to an hourly job, TempFileEntriesMessageListener the triggering interval of this job seems to be set in System Settings/ Documents and Media/Service/Temporary File Entries Check Interval, and it is set to 1 hour by default, but I am...
The sitemap.xml rendering is not showing tree view when xml.sitemap.index.enabled is set to false
legacy
Issue The sitemap.xml rendering is not showing tree view after setting xml.sitemap.index.enabled=false Environment Liferay DXP 7.4, Quarterly Release Resolution This is expected behavior. The XML file that is generated is rendering the file as an XHTML file (see the presence of...
Do Units Of Measure need to be configured individually for each SKU?
legacy
Issue Units Of Measure (UOM) need to be created and configured for each SKU. Can we create UOM centrally and then only select it (reuse it) for SKUs?   Environment Commerce   Resolution UOM needs to be defined individually for each SKU. The reason for this is that they are SKU's specific...
Critical Remote Code Execution Backdoor Vulnerability
legacy
Issue A critical remote code Backdoor vulnerability was discovered on the open source XZ utils. This is CVE-2024-3094 with a maximum CVSS3 score of 10.0 Environment Liferay DXP 7.4 Resolution The Docker images, or DXP, are not vulnerable. Our Docker images use Ubuntu Jammy, and in the...
Clock icon does not appear during Web Content scheduling with Firefox browser
legacy
Issue Firefox browser does not show the Clock icon on Web Content Schedule Dates. Environment Liferay DXP 7.4 Resolution The way browsers handle input for Time fields is not specific to Liferay. It is related to the way browsers themselves manage Time field input. Attached is a simple...
Is there a configuration that controls the retention of comments?
legacy
Issue Let's suppose, a user can create a page with a comments area. Other users may leave comments. How long has the comment been left? How many comments can be stored per page? Can those values be managed, or does Liferay DXP record all comments made on a page without deleting them on a...
Special char "~" in the URL
legacy
Issue Special char "~" in the URL: /group/user-view/~/control_panel/manage/-/site/settings? Environment Liferay DXP [all versions] Resolution Liferay has confirmed that the URL's special char "~" is part of the URL design pattern instead of a security risk. Additional Information...
Cipher Keys used in DXP 7.1 and 7.3
legacy
Issue Our security team would like to know whether Liferay DXP 7.1 and DXP 7.3 uses any of the following cipher keys? DES, 3DES, IDEA or RC2 Environment Liferay DXP 7.1 Liferay DXP 7.3 Resolution The algorithms listed above are not being used in Liferay DXP 7.1 and 7.3 by default. You...
Liferay PaaS - Can I only access the database through the MySQL Client?
legacy
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue I am using the MySQL client to access the database: Using the MySQL Client The shell access is not user friendly and makes it hard to...
Liferay Cookies and GDPR Compliance in Liferay Cloud
legacy
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue How do cookies travel within regions? Environment Liferay SaaS Liferay PaaS Resolution The routing of cookies depends on the location...
Is Liferay Affected by CVE-2023-49070?
legacy
Issue How can I mitigate vulnerability with CVE-2023-49070 regarding Liferay DXP? Environment All environments. Resolution Liferay does not use the Apache OFBiz, so Liferay is not impacted by this vulnerability. Additional Information CVE-2023-49070, content:...
Sites and Libraries breadcrumb only displays current site
legacy
Issue When making a selection from a web content display widget, clicking the “Sites and Libraries” breadcrumb link only displays the current site. Here are the steps to reproduce: Start a 2023.Q4.4 instance. Add a new site called “test-site“. Navigate back to the default “Liferay DXP”...
How to identify customized pages
legacy
Issue I need to locate pages that specify an outdated attribute in their custom look and feel. I haven't found what database column indicates that a page is customized. Can you please point out the column to identify such pages?   Environment DXP 7.4+ Resolution Settings defined...
Is it possible to manage resources per instance in Liferay?
legacy
Issue You have a Liferay server and several virtual instances, and want to know if it’s possible to configure resources for each virtual instance. Environment DXP 7.2+ Resolution Unfortunately handling resources for each instance is not possible, in terms of memory, disk space and JVM...
Can I sort Liferay object entries in alphanumeric order?
legacy
Issue After sorting by the field name in ascending alphanumeric order, the results are currently sorted lexicographically. Environment Liferay DXP 7.4 Liferay Quarterly Release  Resolution This is the expected behavior. By default, Liferay sorts text fields lexicographically. To achieve...
Wrong guest view permission assigned to images inserted into message boards threads (not following the thread's guest view permission)
legacy
Issue if there is no private page on a site, and we create a message boards thread with "Viewable By"="Site Members", and you insert an image in the message (with the editor's image icon), that image will in the Documents and Media will end up having view permission for Guest (although...
What is the minimum Database Privilege Required for Liferay?
legacy
Issue Is it safe to limit the database permissions in any way? Can it be customized to use the minimum amount of Database Privilege and still be functional?  Environment DXP 7.0+ Quarterly Release Resolution Liferay's Database Privileges shouldn't be customized or minimalized in any way....
BaseUpgradeServiceModuleRelease not available in 7.4 anymore, is there a replacement class?
legacy
Issue The class BaseUpgradeServiceModuleRelease was previously available in 7.3 and below and is used as a start/stop method to override and be used as a service tracker.  Environment DXP 7.4+ Resolution This class is no longer available in 7.4. The...
Make prefix URLs configurable - Feature request
legacy
Issue Make prefix URLs configurable - LPD-6813 We are waiting for this for a while. In which Quarterly it is going to be included?   Resolution LPD-6813 is a story ticket and is part of the feature request LPD-640, which is under review. At this point, we do not have the information on...
Documents Modified date changes if documents are moved between folders
legacy
Issue If we move documents between folders their Modification date is updated even if the document itself has not been modified. Environment Liferay 7.3+ Resolution The actual behavior is expected and a limitation of the product. Additional Information Journal Article modified date...
Different total count of items when creating an export and import process over same site
legacy
Issue We are exporting site contents in a lar file. When checking the number of items in the export, we've seen some values. When we try to import this lar in another site, we are detecting that the number of items are not the same as the values presented in the export process....
Guest can't update (call put method) in object headless API
legacy
Issue When trying to update a specific object through Headless API calls with a guest user (using an angular app), the following error is displayed: {     "status": "FORBIDDEN",     "title": "User 20099 must have UPDATE permission for com.liferay.object.model.ObjectDefinition#64782...
user_ .modifiedDate table changes upon User Login
legacy
Issue When a user logs in, Liferay is changing the user_ .modifiedDate value in the database table.    Environment Liferay 7.4   Resolution The behavior where user_ .modifiedDate field is modified upon User Login has been determined to be Intended Behavior. This includes when a user's...
liferay-module-config-generator as a dependency
legacy
Issue As a developer, should I add liferay-module-config-generator in the block dependencies or in the block devDependencies? Environment Liferay DXP 7.1 Resolution This module is thought to be used in the block devDependencies in order to be executed at build time. Additional...
Database Permissions Required for Liferay
legacy
Issue Could you please provide us with a list of Database Permissions required for Liferay to function? (We are optimizing our application security concerning the Database) Environment Liferay DXP 7.1 Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution Liferay requires reading...
Unable to process OpenID Connect authentication response: Requested value and approved state do not match
legacy
Issue From time to time, error messages like the following appear in logs: 2024-02-14 13:31:55.099 ERROR [http-nio-8080-exec-120][OpenIdConnectFilter:132] Unable to process OpenID Connect authentication response: Requested value "yIH9jiIpdpuACAYf7NdNERUksBJZvNOoi-knjn7BOo0" and approved...
What Does The Dash Symbol '-' Mean In The Help Center Module Version Changes Section?
legacy
Issue We are reviewing module changes on help center and in the last column which shows the version destination there is a dash symbol '-'. Does this indicate deprecation?  Environment DXP 7.4 Resolution The dash symbol '-' does not automatically mean something has been deprecated, just...
Licensing Issues with iText PDF Library
legacy
Issue We need to understand that "Does the iText license come bundled with the Liferay License or needs to be procured separately?". Environment Liferay DXP  7.2 Resolution There is no license included for 'iText' with the Liferay Activation Key. Additionally, the embedded iTextpdf...
Price Range Facet is not working with account price
legacy
Issue The Price Range Facet widget filters results based on a product's lowest price. However, the users have created the base price and price list separately for their products, so that their guest users can only view the basic price and specific accounts should see price list values...
Troubleshooting Unexpected Open Ports in Liferay PaaS
Issue When performing a network scan on a Liferay PaaS environment, ports 80, 443, and others appear to be in open state. Will this allow HTTP requests to be successful? Environment Liferay PaaS Resolution This behavior is expected and does not represent a security threat. Liferay PaaS...
Minification of CSS and JavaScript resource
legacy
Issue Unable to minimize the CSS and Javascript using the  minifier.enable  portal property. Environment Liferay DXP 7.4 Resolution The minifier.enabled=false portal property is by default set to false. When setting it to true, it will minify at the runtime. Now, in Liferay DXP 7.4, this...
Retrieve file from a closed Help Center ticket
legacy
Issue Is it possible to retrieve a file from a Help Center ticket that has been marked as closed? Environment DXP 7.0+ Resolution After moving a ticket to a solved status, all the files shared on it are only available for a limited time, more specifically 28 days. If the ticket does not...
Customize the OOTB portlets on the Liferay SaaS platform
legacy
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Could you please provide us with a blog to customize OOTB JSP in Liferay SaaS platform? Environment Liferay DXP 7.1 Liferay DXP 7.2...
'Error : The friendly URL has too many slashes' is observed in friendly URL of child site
legacy
Issue The parent site has a friendly URL say "/abc1" and a child site of it with a friendly URL "/def1". As per the requirement if the user accesses any of the pages of the child site, then the URL should be built like www.xyz.com/abc1/def1/home. However, when this approach is tried in...
Who added user ddm_form_default_user_screen_name in Liferay?
legacy
Issue We found the user ddm_form_default_user_screen_name in our Liferay Portal. Could it be a security attack? Environment Liferay DXP 7.3 Resolution The user with name ddm_form_default_user_screen_name is an internal user automatically created by Liferay. When there is a page that...
Can I Remove a Page From Analytics Cloud Tracking?
legacy
Issue I would like to prevent select pages from being tracked on Analytics Cloud Environment Analytics Cloud Resolution It isn't currently possible to remove specific pages from Analytics Cloud tracking Additional Information This feature was requested at LPD-20301 and is being reviewed...
Vulnerable JavaScript dependency Bootstrap-select 1.12.4
legacy
Issue The version of bootstrap-select 1.12.4 is vulnerable to attacks. To overcome this, bootstrap-select should be upgraded to a non-vulnerable version. Environment Liferay DXP 7.3  Resolution Liferay does not utilize the 'bootstrap-select' library anywhere. This library does not come...
"Index.on.startup=true" does not trigger "Reindex Spell-Check Dictionaries" on Startup
legacy
Issue Adding "index.on.startup=true" to the portal-ext.properties file does not trigger the reindex.   Environment DXP 7.4   Resolution The primary purpose of the property index.on.startup=true is to force reindex after an upgrade (to sync the index with database changes made during the...
PHP in Liferay modules
legacy
Issue Is PHP used to design the modules in Liferay DXP 7.4? Environment Liferay DXP 7.0+ Resolution The PHP portlets are no longer supported in Liferay DXP. The new runtime won't support deploying portlets written in PHP. Need to port the PHP portlet to a different technology. This has...
Unable to generate friendly url for blogs
legacy
Issue When trying to generate a friendly URL for blogs, to eliminate the lengthy URLs. Followed the  steps mentioned in this document: Friendly URLs  Expected behavior: The URL should be shortened after following the document. Observed behavior: A friendly URL is not generated after the...
I would like to audit the download of documents from the Documents and Media Library
Issue I would like to ask about the possibility of auditing the download of documents from the Documents and Media Library. Environment Liferay DXP 7.4 Quarterly Release Resolution Currently, Liferay does not offer an OOTB option to audit the download of documents. You can only monitor...
Restricting impersonation to allow only a single users impersonation at a time
legacy
Issue An Impersonator should be able to impersonate only one user at a time. Currently, Liferay supports multiple users to be impersonated, at the same time in the same browser. We tried to find any properties which can restrict the impersonation to only one user at a time. Can you...
Change of file names when documents are saved to data\document_library
legacy
Issue When saving files to the store, Documents and Media used to use the version label (e.g "1.0") as the file name (prior to Update 72). As of Update 72, file names look like this: 1.0~bf25f4c4-de8c-44af-9f8b-a6acb7bd8951 We would like to understand the background of this change.  ...
How to filter Objects entry with picklist's name in filter
legacy
Issue I have created 2 picklists, e.g. picklist1 and picklist2. And I created 1 object where I create 2 fields of type picklist and I mapped this to above picklists. Now I have added an object entry. Picklist values are stored as {"key": "demo", "name": "Demo"}. Now when I try to apply...
Content creators should able to change the permissions of multiple content at the same time
legacy
Issue As a Content Creator, I want to be able to change the Web Content permissions as a bulk action. So that I’m able to change the permissions of several content at the same time. Environment Liferay DXP [all versions] Resolution The expected behavior is considered under the new...
The status for shared content is blank
legacy
Issue The status is not visible, it always coming blank.  Steps to reproduce: Navigate to the 'Content and Data'> Document and Media> upload 1-2 documents upload a new image and click on three dots to get the share option. Fill user email ID and give the required permissions (view,...
Need to create a role for accessing Server Administration
legacy
Issue User needs to create a custom role and add permissions to access Server Administration Environment Liferay DXP 7.0+ Resolution There are no options provided under System to add these permissions. Only an Administrator role user would be able to access these portlets. There is a...
Need to save the value of the Form's disabled field
legacy
Issue When we disabled the form field using the 'Form Rule', it disabled the fields for the specific user who did not fit the provided role or did not match the criteria. For other users who do not fit the same role or criteria, the field remains disabled. Consequently, when the other...
User can see more Organisations
legacy
Issue We have a problem the User, who has access and rights to selected organizations, can see all organizations when updating user info. Reproduction steps: Customer main user opens Users and Organizations Portlet Selects Organization Selects user and clicks Edit (step3.png) Select...
Liferay 6.2 EE 173 and CVE-2024-25145
legacy
Issue We have found the following article CVE-2024-25145 Stored XSS with search results if highlighting is disabled, however it does not specify whether Liferay 6.2 EE 173 is affected or not. Environment Liferay 6.2 EE 173 Resolution Liferay 6.2 EE 173 is not affected by CVE-2024-25145....

Showing 241 to 300 of 1,664 entries.