Bug #16487
closed
Epic #90674: Backend UI not reflecting permissions
Changed permissions in workspace-versions are not respected
0%
Description
When you change the permissions of a page in the draft-workspace or a custom workspace, a new version of the page is automatically created (unless you have not created one before). The changes in the permissions are applied to the new version.
The problem here is that only the live-version is checked for the access-rights when editing in a draft-workspace. So the changed permissions in the draft-workspace are not taken into account, even if they are more liberal than the old ones.
To my mind there are two possible solutions: Either fix this bug and make the t3lib_befunc::readPageAccess read the correct information or generally only use the permissions from the live-version. And this would mean to also save the permissions with the live-version and the draft-version to preserve them when publishing the draft-version.
(issue imported from #M4092)
Files
Updated by Andreas Wolf over 17 years ago
I have fixed this bug so now the permissions from versionized pages are respected within the workspace. Perhaps this is not the best solution, but it should be better than it is now.
Updated by Andreas Wolf almost 15 years ago
As stated in the latest version of "Inside TYPO3", only the permissions of the live workspace are taken into account. So the backend module should be fixed to only change permissions of the live page. The only remaining problem is how to handle access permissions - as all workspaces are affected by changes, only users who are able to edit the live workspace should be able to change permissions.
Updated by Michael Stucki over 10 years ago
- Category changed from Miscellaneous to Workspaces
Updated by Michael Stucki over 10 years ago
- Project changed from 624 to TYPO3 Core
- Category changed from Workspaces to Workspaces
- Target version deleted (
0)
Updated by Mathias Schreiber over 8 years ago
- Description updated (diff)
- Target version deleted (
7 LTS) - PHP Version deleted (
4) - Is Regression set to No
Updated by Benni Mack about 5 years ago
- Related to Bug #33436: Changes to page usergroup access rights are not respected when previewing a workspace added
Updated by
Updated by Benni Mack about 4 years ago
- Status changed from New to Closed
Hey Andi,
the permissions are currently "synced" from live to any workspace record and kept as is - I discussed this recently with Olly and changing this behaviour now to "hey, let's modify page permissions for a versionized page" is super complex with only benefit. The issue you described 13 years ago (in TYPO3 4.0) is however solved.
I will close this issue now, hope that's OK for you!
Benni.