Project

General

Profile

Actions

Bug #23572

closed

bug when "create new page" is the first action of a non admin user

Added by Olivier SC about 14 years ago. Updated over 11 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2010-09-20
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
4.4
PHP Version:
5.2
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

how to reproduce :
login with non admin user (with proper configuration)
choose "web" > "page"
click on "create new page" on top of page tree (without choosing a page in the pagetree)

=>
a blank page is displayed, with this simple text :
"new record"

and nothing more.

the "bug" is in /typo3/db_new.php

without clicking in the pagetree, the ID of the parent page is not set, so the ID is interpreted "as" 0.

An non-admin, cannot create a page inside page with ID=0, but the content is prepared before checking permission.
so whatever happens, the title text ("new record") is shown (line 183).

with ID:0, and a non-admin user, nothing can be done (typo3/db_new.php line 212).

maybe if a non admin is logged, and create a page with parent ID=0 :
- a special message could be displayed, which could ask to choose a page in the page tree (maybe just after line 215, or in line 282 in a ELSE)
- or the ID of the first "good" page could be used in replacement of ID:0 (just after ligne 168)

(issue imported from #M15752)

Actions

Also available in: Atom PDF