Bug #18053
closedBE Users restricted to a language are able to publish content in every language
0%
Description
Prerequisite:
A page has several content elements i different languages ready for publishing.
A user, who is restricted to work with only (a) certain language(s) will
a) see all other elements in the versioning as well as in the workspace view
and
b) he can actually publish those elements (publishing rights provided)
although his language settings won't even allow him to edit them!
Problem:
The method selectVersionsInWorkspace() which selects "all records from workspace pending for publishing" does not yet consider a users language restrictions. No further checks are done that will verify the users authority to do so.
I have included a patch which will limit the records shown in the versioning and workspace view according to the users available languages stated in $GLOBALS['BE_USER']->groupData['allowed_languages']. The tables that will be limited must have set their "languageField" in the "ctrl" section of the TCA.
He/She will only see and hence be able to publish those elements which comply with his/her language settings.
(issue imported from #M7271)
Files