Bug #20766
closed
t3lib_pageSelect.enableFields() does not take parent groups into account
0%
Description
Modifying EXT:cb_indexedsearch_autocomplete (which uses t3lib_pageSelect.enableFields() to filter search results taken from indexed_search) for a customer, I came across the following case:
I have the following groups:
General, uid=33
|
+-Complete, uid = 3, subgroup = 33
The page I want to have in my search results has fe_group = 33
My test user has usergroup = 3
The result:
t3lib_pageSelect.enableFields() filters out the page (with fe_group=33), because my user is in 33's subgroup 3. The user can thus not see the page even though he is in a more specialized (sub)group (3) that has more rights than the more general group (33).
enableFields has to resolve the user's usergroup via his subgroup up to the root group (the first found having an empty subgroup field)
I am sure this bug is breaking a lot of functionality in all kinds of places, therefore I regard it major.
Why the heck is 4.2.8 not in the <select> for "Product Version"??
(issue imported from #M11553)
Updated by Alexander Opitz over 11 years ago
- Category deleted (
Communication) - Status changed from New to Needs Feedback
- Target version deleted (
0)
The issue is very old, does this issue exists in newer versions of TYPO3 CMS (4.5 or 6.1)?
Updated by Alexander Opitz about 11 years ago
- Status changed from Needs Feedback to Closed
- Is Regression set to No
No feedback for over 90 days.