Project

General

Profile

Actions

Bug #79436

closed

Cannot open TYPO3 Backend from frontend admin panel on "other domain"

Added by Markus Poerschke over 7 years ago. Updated over 6 years ago.

Status:
Closed
Priority:
Could have
Category:
Backend JavaScript
Target version:
-
Start date:
2017-01-24
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
7
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

When accessing the frontend while logged in on a different domain in the backend the user cannot open the backend using the frontend admin panel.

Given there is a multi domain TYPO3 installation:
- There is the host foo.bar and foo.baz.
- The Page "Homepage" is assigned to the host foo.bar.
- The frontend editing is active

When a backend user is now accessing the the backend on foo.baz and selecting the preview button for the "Homepage" then that page will open in a new tab. The host changes to foo.bar. When the user now tries to use the "Open TYPO3 Backend" button nothing happens. A JS error is logged: Error: Permission denied to access property "TS"

The reason for this is that the same origin policy is violated when the frontend tries to access the backedn that is on a different domain.


Related issues 1 (1 open0 closed)

Related to TYPO3 Core - Feature #86548: Copy / paste Frontend URL and open in BackendNew2018-10-02

Actions
Actions #2

Updated by Markus Poerschke over 7 years ago

In my mind this is not directly related. The other ticket is about the login part. In my example (maybe I missed that point) the Backend User is already logged in.

Actions #3

Updated by Markus Poerschke over 7 years ago

The same problem occures when the page is open via a <a href="..." target="_blank"> link from a website from another domain. So it is not fully related to multi domain websites.

Actions #4

Updated by Frank Nägler over 6 years ago

  • Status changed from New to Needs Feedback

Maybe I am wrong, but I guess there is not solution, because of the reason you mentioned.
The only way is to use the same domain. If you have any solution, please tell me.

Actions #5

Updated by Markus Poerschke over 6 years ago

  • Assignee set to Markus Poerschke

This was exactly how we solved the problem for one of our customers. He then was forced to login twice into TYPO3 Backend.

Let me check this ticket again. I think it can be solved by setting the correct "Cross Origin" HTTP headers. The question is only if this is something that needs to be added to the PHP implementation of TYPO3 or if it can be solved by a simple Apache configuration change.

Actions #6

Updated by Frank Nägler over 6 years ago

I guess this should be solved by server setup, so apache or nginx config is a good place.

Actions #7

Updated by Frank Nägler over 6 years ago

  • Status changed from Needs Feedback to Closed

No feedback since 1 month, as mentioned in my last comment I think this should be solved by server configuration.
If you think this should or can be solved in another way, feel free to reopen this issue.

Actions #8

Updated by Xavier Perseguers over 5 years ago

  • Related to Feature #86548: Copy / paste Frontend URL and open in Backend added
Actions

Also available in: Atom PDF