The search result should be filtered based on users permission.

[shilpa kumar, modificado hace 9 años.]

When a item without guest VIEW permission got indexed, a guest can still find it while doing the search. It will only stop a guest accessing the item while clicked on the link. In most of case, guest without VIEW permission means the guest should never know the item existed either from its own application or any other application, for example, Search.

If the permission was indexed and the search query was modified with extra role query in the search engine level, then the result could limit the items only a user has view permission.
For example:

Item1
ViewPermission: guest, member, owner

Item2
ViewPermission: member

A query modified to +(originalQuery) +(ViewPermission=userRoleInThisCommunity)

This defect is same as https://issues.liferay.com/i#browse/LPS-427
We have similar requirement.

we are using:
liferay-portal-6.1.20-ee-ga2
Solr 3.5