Bug #27325
closed
Editor see records without permissions on table
Added by Michael Klapper over 13 years ago.
Updated about 6 years ago.
Description
An enditor is able to see all records in Worskpace list without the permissons to see all type of records.
How to test:
- Create WS-Editor without the permission to see / modify pages_language_overlay records
- Login as Admin and modify an existing pages_language_overlay record in WS
- Login as WS-Editor and check the worskpace module listing. You should not see the pages_language_overlay record, but you can.
Patch set 1 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2600
Patch set 1 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2601
- Status changed from Accepted to Under Review
Patch set 2 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2600
Patch set 2 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2601
Patch set 3 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2600
Patch set 3 of change I55b8eed9a7b475040b6f842e9d8c94e60191c896 has been pushed to the review server.
It is available at http://review.typo3.org/2601
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset commit:0e76de47541d96d00b918617b29181f768af71d7.
- Target version deleted (
4.5.4)
- Category changed from Bugs to Workspaces
- Project changed from 624 to TYPO3 Core
- Category changed from Workspaces to Workspaces
- Status changed from Resolved to Closed
Also available in: Atom
PDF