TYPO3 Core

Workspaces show changes files and folders, even if the current user did not have the permissions to read or write on it.

How to reproduce:

• Create file mounts
• Create backend user and restrict the file access to different mounts
• Change the metadata for file in a folder where one of the users did not have access.
• Login with the user which did not have access to the folder.
• Open the workspaces module and list the changes.
• The Changes of the metadata appears also for user which did not have access to the folder.