Bug #23572
closed
bug when "create new page" is the first action of a non admin user
0%
Description
how to reproduce : login with non admin user (with proper configuration) choose "web" > "page" click on "create new page" on top of page tree (without choosing a page in the pagetree)
=>
a blank page is displayed, with this simple text :
"new record"
and nothing more.
the "bug" is in /typo3/db_new.php
without clicking in the pagetree, the ID of the parent page is not set, so the ID is interpreted "as" 0.
An non-admin, cannot create a page inside page with ID=0, but the content is prepared before checking permission.
so whatever happens, the title text ("new record") is shown (line 183).
with ID:0, and a non-admin user, nothing can be done (typo3/db_new.php line 212).
maybe if a non admin is logged, and create a page with parent ID=0 :
- a special message could be displayed, which could ask to choose a page in the page tree (maybe just after line 215, or in line 282 in a ELSE)
- or the ID of the first "good" page could be used in replacement of ID:0 (just after ligne 168)
(issue imported from #M15752)
Updated by Nicole Cordes over 11 years ago
- Status changed from New to Needs Feedback
- Target version deleted (
0)
I can't reproduce this issue with current versions (4.5, 4.7, 6.2-dev). Is this still relevant for you?
Updated by Olivier SC over 11 years ago
I think we can't reproduce this any more because for TYPO3 4.5+ the "add page" action is no more a "one click" action (it's a drag and drop action).
Now, we need to drag/drop the new page in the page tree, so ID of the parent page can't be unknown.
This issue can be closed.
Updated by Nicole Cordes over 11 years ago
- Status changed from Needs Feedback to Closed