Capability

Personalization

Liferay provides powerful out-of-the-box features for building and delivering personalized experiences to users. Personalization features empower you to deliver novel site experiences that differ based on defined user segments, design and execute A/B Tests, and more.

Feature
Deployment Approach
Public access of database
Issue How users can enable public access to the database of their PaaS environment Environment Liferay self-managed (LXC-SM) Resolution Enabling even read permissions to the database is a huge security risk....
Dynamic Data List Template
Issue Users are unable to edit the Dynamic Data List Template in DXP 7.4 since the dynamic data List template editor is not visible Environment Liferay DXP 7.4 [all versions] Quarterly Release Resolution Users need...
Password for LDAP and Liferay users should not expire
Issue After integrating Liferay with the LDAP server for users, the passwords for the users are expiring after some time and are required to be reset again. Is there any way for the passwords to never...
Users are not able to see the tasks under the 'My Workflow Tasks' menu
Issue Users are unable to see the tasks under the 'My Workflow Tasks' menu after a workflow has been assigned to them for approval and the following errors related to elastic search and Kaleo instance token...
Deployment dependencies that require internet connectivity (On-premise)
Issue What are the necessary dependencies that require internet connectivity during the build and runtime of a project?  Environment Liferay DXP 7.4 Resolution Technically, all dependencies are downloaded...
Block the traffic based on the regions
Note: please note that Liferay has renamed its Liferay Experience Could offerings to Liferay SaaS (formerly LXC) and Liferay PaaS (formerly LXC-SM). Issue Is it possible to block the request on the site based on the...
Add Bulk products to the Cart
Issue Is there a way to add Bulk products to the cart using the Liferay API? Environment Liferay DXP 7.4 [all versions] Quarterly Release  Commerce 4.0 Resolution Liferay provides an API, from which it will help to...
Issue while adding, publishing and deleting the objects
Issue Unable to add, publish, and delete the objects in Liferay. Below are the observed errors: 1. Uncaught (in promise) SyntaxError: Unexpected token '<', "<HTML><HEA"... is not valid JSON. 2. Failed to load...
Infinite redirects when a user logs in for the first time in a site with a custom theme
Issue When a user logs in for the first time in a site with a custom theme applied, an infinite set of redirections happens and the following warning message appears in logs: [code_jsp:161] {code="500", msg="",...
Multi-Factor Authentication via SMS
Issue We want to set up MFA via SMS without using any external Apps. Is this possible with Liferay out-of-the-box? Environment Liferay DXP 7.2 Liferay DXP 7.3 Liferay DXP 7.4 Resolution MFA by SMS is not...
Workflow Revision History does not display version dates or allow previews
Issue In 7.4 Q4.0 release, when reviewing the Revision History of a workflow, we are not able to Preview or see the Version Date for a Workflow. Environment 2023.Q4 Resolution Request a hotfix containing LPD-30650 ...
How to redirect users accessing www.mydomain.com to mydomain.com in my PaaS environment?
Issue We need to implement a rewrite rule that change the URL in a client request from www.mydomain.com to mydomain.com. How should we proceed to configure this in our PaaS environment? Environment Liferay PaaS...
CVE-2022-22950
Issue We would like to determine whether Liferay is vulnerable to CVE-2022-22950. The CVE claims that in Spring Framework versions 5.3.0 - 5.3.16 and older unsupported versions, it is possible for a user to provide a...
Export Analytics DXP Entities is missing and is replaced by export-analytics-dxp-entities
Issue We've observed that when accessing the Job Scheduler, the property 'Export Analytics DXP Entities', is missing. We see that 'export-analytics-dxp-entities' is available.  Is 'export-analytics-dxp-entities'...
Is it possible to implement branching paths using Liferay Forms where one path does not require form submission?
Issue In some use cases, it may be desired for a form to branch into a path that does not require a form submission, based on the user's selection  For example: If a user has submitted form in the past, they may not...
[T003] Open redirect in /c/document_library/find_folder with DNS rebinding vulnerability
Issue Medium threat found during the performance testing: [T003] Open redirect in /c/document_library/find_folder with DNS rebinding Environment Liferay Quarterly release Resolution The reported concern has been...
How to handle "Connection Closed" Error with BLOB Type in Oracle DB?
Issue A "Connection closed" error occurs when handling BLOB type columns in Oracle databases using the getBinaryStream() method in Java, a known issue when attempting to read BLOB data in chunks after the...
Configured Highlighted Structures are not displayed
Issue After configured Highlighted Structures in 2024.Q1, they are not displayed in Web Content Administration. Environment Quarterly Releases: 2024.Q1 Resolution This feature is under a Release Feature Flag in...
User is unable to login after enabling ModSecurity
Issue After enabling ModSecurity, below error message is printing in the webserver log file, and due to this user is unable to log in: ModSecurity: Access denied with code 403 (phase 2). Matched "Operator `StrEq'...
ModSecurity Alert Notifications
Issue Users want to enable ModSecurity alert notification, so that, whenever there is any breach/alert an email notification is sent to the configured user.  Environment LXC-SM 2024.Q2 Resolution ModSecurity does...