Project

General

Profile

Actions

Task #96687

closed

Point out more prominently to switch to explicitADmode explicitAllow

Added by Sybille Peters over 2 years ago. Updated about 2 years ago.

Status:
Rejected
Priority:
Should have
Assignee:
-
Category:
Reports
Target version:
-
Start date:
2022-01-30
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
backend users, permissions
Complexity:
Sprint Focus:

Description

With https://review.typo3.org/c/Packages/TYPO3.CMS/+/70233 it is explained that explicitADmode=explicitAllow is the default and is to be preferred.

However, very old installations may still be using explicitDeny.

I propose to

  • either add a Changelog for this
  • show a warning in the Status report if explicitADmode=explicitDeny is used.

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Task #94721: Set explicitADmode to explicitAllow in DefaultConfigurationClosed2021-08-05

Actions
Actions #1

Updated by Christian Kuhn about 2 years ago

  • Related to Task #94721: Set explicitADmode to explicitAllow in DefaultConfiguration added
Actions #2

Updated by Benni Mack about 2 years ago

Sybille Peters wrote:

With https://review.typo3.org/c/Packages/TYPO3.CMS/+/70233 it is explained that explicitADmode=explicitAllow is the default and is to be preferred.

However, very old installations may still be using explicitDeny.

I propose to

  • either add a Changelog for this
  • show a warning in the Status report if explicitADmode=explicitDeny is used.

I have never seen anybody using explicitDeny or the option "individual" in any production environment for the past 16 years. I think it's time to let it go.

Actions #3

Updated by Sybille Peters about 2 years ago

  • Status changed from New to Rejected

Thanks for the feedback. Closing.

Actions

Also available in: Atom PDF