Project

General

Profile

Actions

Feature #14383

closed

Unlink doesn't work for Non-Admins

Added by Ingo Schommer over 19 years ago. Updated about 13 years ago.

Status:
Closed
Priority:
Should have
Category:
Backend API
Target version:
-
Start date:
2004-11-11
Due date:
% Done:

0%

Estimated time:
PHP Version:
4.3
Tags:
Complexity:
Sprint Focus:

Description

In the Web->Templavoila-Module deleting an content-element only works for BE-Admins. Non-Admins (access-list-restricted) can't delete even with proper list/modify-rights set. The according link is:
/typo3conf/ext/templavoila/mod1/index.php?id=2&unlinkRecord=pages%3A2%3AsDEF%3AlDEF%3Afield_content%3AvDEF%3A1%2Ftt_content%3A12%2F1
After clicking the page reloads without effect.
(I'm aware of the fact that TV-content-elements can't (yet) be deleted finally via TV but only unlinked.)

Typo3 3.7.0
Templavoila 0.3.0
IE6/Win Firefox1.0/Mac
(issue imported from #M485)


Files

0000485.patch (1.69 KB) 0000485.patch Administrator Admin, 2010-03-25 17:19
0000485_v2.patch (1.73 KB) 0000485_v2.patch Administrator Admin, 2010-03-26 08:35
485_v3.diff (1.74 KB) 485_v3.diff Administrator Admin, 2010-04-10 23:03
Actions #1

Updated by Ingo Schommer over 19 years ago

Sorry for the repeated posting, but it seems that even your bugtracker is buggy ;)
I got this error on sending my bugreport:
"SYSTEM WARNING: email_send(): open_basedir restriction in effect. [...]"

Actions #2

Updated by Sacha Vorbeck over 19 years ago

you`re right, clicking on the waste-bin icon won`t delete content elements. However, if an admin clicks on the pencil and switches to edit mode, he can delete the content element there. ASFAIK Robert is aware of the problem.

Actions #3

Updated by Robert Lemke over 19 years ago

I could not reproduce your bug. I created a non-admin backend user, created a content element with the TV page module and deleted (ie. unlinked) it afterwards by clicking on the trash can icon. Works.

Actions #4

Updated by old_jack-uk almost 18 years ago

This is still an issue in Typo3 version 4.

A BE User (non-admin) can delete a content record by clicking on the 'Delete' Trashcan icon whilst editing the content record. However, in the TV Page view, the 'Unlink Record' trashcan icon does nothing unless I am a BE Administrator user.

Actions #5

Updated by Julien Bourdin almost 18 years ago

After having the same kind of issue, I've followed the execution of an "unlink element" from the page menu and pointed out that BEuser must be allowed to edit tt_content-tx_templavoila_flex from the exclude fields.

In the BE screen of group or user config, the exclude field is named "Pagecontent: content" which is not so clear...

So, in my case, allowing this field to my user allow him to unlink content

Actions #6

Updated by Oliver Rowlands over 17 years ago

I came accross the same problem in Typo3 4.0. It is not a bug, more of a user / group permissions issue. The problem I experience was that non-admin back-end users were able to create content but not unlink it or copy / cut & paste it on the same page.

The problem was fixed by allowing my 'Editor' group access to the following fields in the 'Allowed excludefields' list:
- Page: Content
- Pagecontent: Content

I'm pretty sure those fields are enabled by default but I tend to lock editors down (disable everything then enable only what they need) so it probably got broken during that process.

Actions #7

Updated by Kasper Ligaard over 17 years ago

I can confirm this: the BE-users need Page:Content and Pagecontent:Content in allowexcludefields.
Is there something more to do in this issue or should it be resolved..?

Actions #8

Updated by Frans Saris over 17 years ago

But if you can ad content without these permissions, why can you delete content?

Actions #9

Updated by Typoheads - Web Engineering over 17 years ago

i can confirm this also. Non-admins need Page:Content and Pagecontent:Content in allowexcludefields.
imho this should be changed asap, because showing the content fields to normal editors is not very usability friendly...

Actions #10

Updated by Dmitry Dulepov over 17 years ago

They really need these two fields. Page:content is for flexform, which TV change, it is a property of the page. Pagecontent:content is for tt_content. All correct except that it is not clear for admins why it should be so... May be a warning in page module should be displayed...

Actions #11

Updated by Typoheads - Web Engineering over 17 years ago

hello,
i disagree that 'they' - the editors - need the fields page:content. they simply don't - templavoila need them to work properly. nobody uses these fields to show content on the website, thats all done in the module. and for admins it's a pitfall because - at least in my case - they only want to show the absolut minimum amount of fields which are needed for editors so that they can edit/create content. So imho tv constrains admins to show fields which clutters the interface of typo3 which is detracting the usability of typo3...

Actions #12

Updated by Dmitry Dulepov over 17 years ago

You must understand: TV has to modify this filed, so user must have access for it. If you do not want editors to see this field, hide it with TSConfig!

Actions #13

Updated by Typoheads - Web Engineering over 17 years ago

ok, hiding the fields are the best solution!

TCEFORM.pages.tx_templavoila_flex.disabled = 1
TCEFORM.tt_content.tx_templavoila_flex.disabled = 1

Actions #15

Updated by Tolleiv Nietsch about 14 years ago

Moved issue to "Core" since the purpose of this one is now to cover the hook-request. Once this is done #3903 can be finished.

Actions #16

Updated by Steffen Kamper about 14 years ago

committed CGL-cleaned v3 to trunk, rev 7272

Actions #17

Updated by Susanne Moog about 13 years ago

  • Target version deleted (4.4.0)
Actions

Also available in: Atom PDF