Project

General

Profile

Actions
Copy link

Bug #85108

closed

Deletion of file is impossible, if filemount isn't /

Added by Markus Hofmann almost 6 years ago. Updated almost 5 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
-
Start date:
2018-05-29
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Yes
Sprint Focus:

Description

With a normal backend user it isn't possible to delete files, if the assigned sys_filemount path is not set to "/".

Way to reproduce:

  • create a sys_filemount with a path not "/" (e.g. "/user_upload/").
  • assign to a not admin backend user
  • give full access for file permissions
  • upload a new file (to wherever you want)
  • try to delete a file -> resumes to error #1375955684
#1375955684: You are not allowed to access the given folder: "" (More information)

TYPO3\CMS\Core\Resource\Exception\InsufficientFolderAccessPermissionsException thrown in file
vendor/typo3/cms/typo3/sysext/core/Classes/Resource/ResourceStorage.php in line 765.

debugging the Method shows, that the system bubbles the folders up to "/" for checking the access. "/" is not allowed, because sys_filemount path is "/user_upload/". The backend user can't delete his own files.

I created a folder and deleted it. This worked fine.

Related issues 1 (0 open — 1 closed)

Related to TYPO3 Core - Bug #85079: You are not allowed to access the given folder: "user_upload"ClosedNicole Cordes2018-05-25

Actions
Actions
Copy link
 #1

Updated by Michael Binder almost 6 years ago

I have the same Issue. In Version 8.7.13 everything works fine.

It is sufficient if the user has "read only" permission to "/", but this is not a solution.

Actions
Copy link
 #2

Updated by Michael Binder almost 6 years ago

  • Related to Bug #85079: You are not allowed to access the given folder: "user_upload" added
Actions
Copy link
 #3

Updated by Wouter Wolters almost 6 years ago

  • Status changed from New to Needs Feedback

Hi,

Could you try the following patch https://review.typo3.org/#/c/57105/
This has been merged now into the 8.7 branch to be available in the next release.
It should solve your problem.

Actions
Copy link
 #4

Updated by Adrien Jacob almost 6 years ago

  • Is Regression set to Yes

Hi, I confirm I have the same issue with 8.7.15 (not 8.7.13)... The suggested fix somewhat solves it, thanks :
- The file is now deleted properly
- BUT an error message is shown saying the user doesn't have access to the "_recycler_" folder.

Removing/renaming the recycler folder removes the error message, but that's not a good solution obviously.

Actions
Copy link
 #5

Updated by Susanne Moog about 5 years ago

I cannot reproduce the issue (neither the original one nor the recycler issue on) a current v9/v10 system. Does it still exist?

Actions
Copy link
 #6

Updated by Adrien Jacob about 5 years ago

Looks ok now on 8.7.24... cannot test on v9 / v10 sorry

Actions
Copy link
 #7

Updated by Riccardo De Contardi almost 5 years ago

  • Status changed from Needs Feedback to Closed

I think it should be safe to close this one and consider it solved;

Of course, if you think that this is the wrong decision or experience the issue again, please reopen it or ping me; Please, also add detailed information about how to reproduce the issue.

Thank you.

Actions
Copy link

Also available in: Atom PDF