Project

General

Profile

Actions

Bug #21061

closed

TCEforms suggest sometimes uses incorrect permissions to show records

Added by Andreas Wolf about 15 years ago. Updated about 11 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2009-09-15
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.3
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

If a record is selected in an offline workspace, the permissions of the record in this workspace are respected. This is considered a bug, as TYPO3 core documentation clearly states that only the permissions of the live workspaces should be respected when checking record access. Though there are some other open bugs regarding this behaviour (e.g. 0004092), this should be fixed.

The fix is quite easy: Just always make a workspace overlay (or use the value of the field t3ver_oid, if present) before checking access.

(issue imported from #M11964)


Files

0011964_v1.diff (3.42 KB) 0011964_v1.diff Administrator Admin, 2009-09-15 21:33

Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Feature #17874: Add suggest-like feature to TCEformsClosedRupert Germann2007-12-02

Actions
Actions #1

Updated by Alexander Opitz over 11 years ago

  • Status changed from New to Needs Feedback
  • Target version deleted (0)

The issue is very old, does this issue exists in newer versions of TYPO3 CMS (4.5 or 6.1)?

Actions #2

Updated by Alexander Opitz about 11 years ago

  • Status changed from Needs Feedback to Closed
  • Is Regression set to No

No feedback for over 90 days.

Actions

Also available in: Atom PDF