Bug #23572
closedbug when "create new page" is the first action of a non admin user
0%
Description
how to reproduce : login with non admin user (with proper configuration) choose "web" > "page" click on "create new page" on top of page tree (without choosing a page in the pagetree)
=>
a blank page is displayed, with this simple text :
"new record"
and nothing more.
the "bug" is in /typo3/db_new.php
without clicking in the pagetree, the ID of the parent page is not set, so the ID is interpreted "as" 0.
An non-admin, cannot create a page inside page with ID=0, but the content is prepared before checking permission.
so whatever happens, the title text ("new record") is shown (line 183).
with ID:0, and a non-admin user, nothing can be done (typo3/db_new.php line 212).
maybe if a non admin is logged, and create a page with parent ID=0 :
- a special message could be displayed, which could ask to choose a page in the page tree (maybe just after line 215, or in line 282 in a ELSE)
- or the ID of the first "good" page could be used in replacement of ID:0 (just after ligne 168)
(issue imported from #M15752)