Bug #14471
closedAccess / DB mount problem
0%
Description
I have a page with type "shortcut" as root page that links to the "real" home page on level 1. I maintain this site for another guy and he has created a backend group and set all the rights and groups for the pages.
The "shortcut" page was set as DB mount, but he has not set any group for this page (as he didn't want to allow anybody to do anything on this page ('cause it's just a shortcut, you know)).
So what happened?
A user with the mentioned group saw the full page tree (including the "shortcut" home page (= DB mount) and all subsequent pages below) but wasn't able to edit anything on any page (he had got all rights for the pages though!!).
I tracked this down to t3lib_BEfunc/isInWebMount and this returns only a web mount page (ID) if you have access to the page (that's reasonable).
Ok, no problem at all if I see nothing in the page tree, but as soon as I can see all pages (as it's the case right now) I count that behaviour as buggy!
I'll take a closer look at it and provide possible solutions... (if I get the time)
(issue imported from #M645)