Hi all,
We're using Liferay CE 7.3.3 and we'd like to have a site hierarchy
where content is shared from a parent site to a child site, but only a
subset of the parent site's users (marked by membership to a
UserGroup) should be able to access the private pages of the child site.
Our current setup looks like this:
- The ParentSite is set as default association to each new user, so
all our Users are members of that parent site.
- The ChildSite is a child of ParentSite, using content, structures
and templates from the ParentSite.
- The ChildSite is set to "private", which means that
"A Site Administrator must explicitly invite a User to join and
then add them to the Site. Private membership Sites don’t appear in
the My Sites app." according
to the docs.
- Users are added to the ChildSite by adding them directly (I'll
call those "explicit members") or adding them to a
UserGroup which is member of the ChildSite.
- The private pages of the ChildSite only have permissions for the
owner and SiteMembers.
So far, after sifting through ControlPanel, Liferay docs, the
internet and some of Liferay's code, I'd think that a User who is a
member of ParentSite, but not an explicit member of neither ChildSite
nor the UserGroup that is member of ChildSite can NOT access the
private pages of ChildSite. After all, I did not find any mention
along the lines of "SiteMembers of a ParentSite are automatically
SiteMembers of a ChildSite".
But, according to my tests, apparently any authenticated User can
access the private pages of the ChildSite -- I even removed a User
from the ParentSite and tested again: That User can still access the
private pages of both sites (but I'm willing to put that down to
caching issues).
Does anybody have an inkling of an idea where my line of thinking is
wrong? Or how do I have to configure the Sites so that content sharing
from my ParentSite to ChildSite does work, but SiteMembership is not inherited?
Thanks for any idea,
Dave
