1. Home
  2. Development
  3. RE: how to disable a normal user from seeing the list of users in liferay 7.0

RE: how to disable a normal user from seeing the list of users in liferay 7.0

fer ros, modified 5 Years ago.
how to disable a normal user from seeing the list of users in liferay 7.0
New Member Posts: 9 Join Date: 7/6/20 Recent Posts
by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list through the following link:
https://urlInstance/group/control_panel/manage?p_p_id=com_liferay_my_account_web_portlet_MyAccountPortlet&p_p_lifecycle=1&p_p_state=maximized&p_p_mode=view&_com_liferay_my_account_web_portlet_MyAccountPortlet_javax.portlet.action=%2Fusers_admin%2Fedit_user&p_p_auth=ncrtGfLpis there any property to set or some permission to modify? I tried setting the following properties in the portal-ext.properties but nothing:
sites.control.panel.members.visible = false
user.groups.search.with.index=false
users.list.views= (empty)
thumbnail
Olaf Kock, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
Liferay Legend Posts: 6441 Join Date: 9/23/08 Recent Posts
fer ros:

by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list

Do you see a list of users? I see the current user's account, as the MyAccountPortlet suggests.
fer ros, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
New Member Posts: 9 Join Date: 7/6/20 Recent Posts
Olaf Kock:

fer ros:

by accessing via url a normal user can see the list of users who are part of the instance even if he cannot do anything, but I would not want any user to have access to this list

Do you see a list of users? I see the current user's account, as the MyAccountPortlet suggests.

a normal user does not have access to the portal from the graphical interface ... but if he enters the url indicated in the question, unfortunately any user can see the list of all users who are registered on the specific instance
fer ros, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
New Member Posts: 9 Join Date: 7/6/20 Recent Posts
attached is as I see it when a normal user types the url mentioned in the question

Attachments:

thumbnail
Olaf Kock, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
Liferay Legend Posts: 6441 Join Date: 9/23/08 Recent Posts
Which version?
fer ros, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
New Member Posts: 9 Join Date: 7/6/20 Recent Posts
Olaf Kock:

Which version?
7.0 -ga5
thumbnail
Olaf Kock, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
Liferay Legend Posts: 6441 Join Date: 9/23/08 Recent Posts
Sorry, I can't reproduce on 7.2 (DXP, but not even the latest fixpack).
Maybe it's a bug that's long been fixed?
majdi Achouri, modified 5 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7
Junior Member Posts: 38 Join Date: 11/21/19 Recent Posts
A normal User is not allowed to see the other site membership, 
In this case check the roles assigned to this user, This user should has only the user  role
if you find that the user has also  a Power User  role in this case be sure that this power user role is causing the issue. plz check the roles by userId in the liferay database side.
thumbnail
Jamie Sammons, modified 3 Years ago.
RE: how to disable a normal user from seeing the list of users in liferay 7.0
Junior Member Posts: 59 Join Date: 6/26/14 Recent Posts

Hi all, I am facing the same issue in Liferay 7.0. I've tried the configuration posted by @fer ros in portal-ext.properties but not working. 

Also it seems that the problem does not come from having the Power user assigned, since removing it a normal user can still have access to the user list.

Any help is welcome