Bug #16487
closed
Epic #90674: Backend UI not reflecting permissions
Changed permissions in workspace-versions are not respected
Added by Andreas Wolf over 17 years ago.
Updated about 4 years ago.
Description
When you change the permissions of a page in the draft-workspace or a custom workspace, a new version of the page is automatically created (unless you have not created one before). The changes in the permissions are applied to the new version.
The problem here is that only the live-version is checked for the access-rights when editing in a draft-workspace. So the changed permissions in the draft-workspace are not taken into account, even if they are more liberal than the old ones.
To my mind there are two possible solutions: Either fix this bug and make the t3lib_befunc::readPageAccess read the correct information or generally only use the permissions from the live-version. And this would mean to also save the permissions with the live-version and the draft-version to preserve them when publishing the draft-version.
(issue imported from #M4092)
Files
I have fixed this bug so now the permissions from versionized pages are respected within the workspace. Perhaps this is not the best solution, but it should be better than it is now.
As stated in the latest version of "Inside TYPO3", only the permissions of the live workspace are taken into account. So the backend module should be fixed to only change permissions of the live page. The only remaining problem is how to handle access permissions - as all workspaces are affected by changes, only users who are able to edit the live workspace should be able to change permissions.
- Category changed from Miscellaneous to Workspaces
- Project changed from 624 to TYPO3 Core
- Category changed from Workspaces to Workspaces
- Target version deleted (
0)
- Target version set to 7.5
- Target version changed from 7.5 to 7 LTS
- Description updated (diff)
- Target version deleted (
7 LTS)
- PHP Version deleted (
4)
- Is Regression set to No
- Related to Bug #33436: Changes to page usergroup access rights are not respected when previewing a workspace added
- Parent task set to #90674
- Status changed from New to Closed
Hey Andi,
the permissions are currently "synced" from live to any workspace record and kept as is - I discussed this recently with Olly and changing this behaviour now to "hey, let's modify page permissions for a versionized page" is super complex with only benefit. The issue you described 13 years ago (in TYPO3 4.0) is however solved.
I will close this issue now, hope that's OK for you!
Benni.
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by 
Updated by