Skip to:

  1. Skip to Jira Navigation
  2. Skip to Side Navigation
  3. Skip to Main Content

Guests can view names and emailadresses of all Liferay users

Description

As an unauthenticated user it is possible to retrieve the names and email adresses of all Liferay users

To retrieve a list of all users simply issue the following request

http://localhost:8080/c/search/open_search?p=1&c=5000&keywords=entryClassName:com.liferay.portal.model.User

Getting to the email adresses is a bit more involved, because these are not included in the response. But it is still possible to get to them by utilizing wildcard searches. The following request will return all users who's email address start with a "b"

http://localhost:8080/c/search/open_search?p=1&c=5000&keywords=emailAddress:b*

By adding a letter at a time to the emailAddress parameter its possible to eventually get someone's full email address

Activity

Show:

Jelmer JelmerMay 5, 2012 at 4:47 PM

Duplicate
Pinned fields
Click on the next to a field label to start pinning.

Details

Assignee

Reporter

Labels

Fix Priority

3

Components

Fix versions

Affects versions

Priority

Zendesk Support

Created May 5, 2012 at 1:25 PM
Updated June 24, 2023 at 4:01 PM
Resolved May 7, 2012 at 5:01 AM