Project

General

Profile

Actions

Bug #105345

open

Simulate BE-User does not show Install-Tool modules for system maintainers

Added by Nikita Hovratov 3 months ago. Updated about 1 month ago.

Status:
New
Priority:
Should have
Assignee:
-
Category:
Install Tool
Target version:
-
Start date:
2024-10-18
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

When switching to another user via "simulate backend user", the install tool modules "Maintenance", "Settings" etc. are not displayed, event if the user is a system maintainer and/or the TYPO3_CONTEXT is "Development".

Actions #1

Updated by Nikita Hovratov 3 months ago

  • TYPO3 Version changed from 13 to 12
Actions #2

Updated by Garvin Hicking about 2 months ago

  • Category set to Install Tool
Actions #3

Updated by Jigal van Hemert about 1 month ago

In case the context is not Development this seems the desired behaviour.
If you are not a system maintainer and switch to another user who is a system maintainer then you should not see the Install Tool modules. Otherwise you could get yourself elevated to the level of a system maintainer.
If you are a system maintainer and switch to another user who is not a system maintainer then you should see the situation as the other user sees it, and thus also not see the Install Tool modules.
The case where you might need to see them is if you are a system maintainer and you switch to a user which is also a system maintainer.

In development context it's probably safe to show the modules if you switch to another user. Currently \TYPO3\CMS\Core\Authentication\BackendUserAuthentication::isSystemMaintainer() doesn't check for the context anymore once it detects a switch to another user.

Perhaps the check for switch user should be moved to after the context and both the original user and the target user (if applicable) should be in the list of maintainers in order to return true.

Actions

Also available in: Atom PDF