Bug #18242
closed
Toolbar in Cleaner Backend does not honor BE user rights
0%
Description
hey,
I just used the TYPO3 backend as a normal (non-admin) user and found out that the top bar does not change if there are limited rights.
I think we need something similar for the rights system as with the modules.
a) The search on top should only be displayed if the user has access to the "List" module
b) The workspace icon should only be shown if 1. there are more than one workspace available for this user and 2. if the module "Workspace Manager" is available for the user.
c) The cache menu should only be visible if the user is allowed to clear the cache or if he/she is an admin. Thus we need an option for a BE user to configure this.
(issue imported from #M7579)
Files
Updated by Ingo Renner almost 17 years ago
in general it should be enough to have a look at the old sources
Updated by Steffen Kamper almost 17 years ago
i checked user with only access to live workspace: the selector disappears, only the icon stays (should be removed)
The other checks has to be integrated as well like cache links.
Updated by Steffen Kamper almost 17 years ago
i integrated the workspace access check from old source, please have a look
Updated by Steffen Kamper almost 17 years ago
After talking to Ingo in IM i made a patch and extended the interface with checkAccess-Method. If this method returns false, whole module toolbar item is not rendered.
I changed all backend toolbar-modules and added this method returning true and marked as TODO
Workspacemodule does a real check here
@Benni Mack: opendocs has this method also, you can integrate the basic check.
Additional checks for single items should take place in module->render()-method.
Updated by Ingo Renner almost 17 years ago
access checking for toolbar item is prepared now, check out svn revision 3224