TYPO3 Core

How to test?

1. Apply the patch

2. Open EXT:extensionmanager/ext_tables.php

3. Add instruction "'isDisplayed' => FALSE," like below:

\TYPO3\CMS\Extbase\Utility\ExtensionUtility::registerModule(
        ...,
        ...,
        ...,
        array(
            ...
            'isDisplayed' => FALSE,
        )
    );

4. Clear the cache

5. Reload the BE, the Extension Manager is not displayed anymore but still accessible at http://my.host/typo3/mod.php?M=tools_ExtensionmanagerExtensionmanager

The module will still appear as normal in the ACL list in a BE groups obviously.

I don't get your usecase. Can you elaborate a bit more please?

Patch set 2 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 3 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

IMHO this is more an issue of the dispatcher of extbase, then hiding modules.

You should be able to register actions that can be run from backend, but are no modules.

IMHO this is a hack and should be tackled at a more technical level.

Hi Philipp,

Thanks for bringing up this topic on the Core ML.

You should be able to register actions that can be run from backend, but are no modules.
IMHO this is a hack and should be tackled at a more technical level.

I see what you mean. But let say for now it is a pragmatic approach waiting for a more structural refactoring of the Core. This feature is very useful for BE development and can be deprecated / removed any time after we have a more capable ACL system.

As a side note, I know Nico has worked on an approach where he could define very fine grained ACL against Controller / Actions. It may be worth having a look at his implementation.

Why does it reminds me to the security framework of Flow!?

For the time being and following discussion with Helmut's suggestion, I have renamed the flag "hideInMenu".

Patch set 4 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 5 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 6 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 7 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

After discussing the topic with Steffen Müller again, it looks this could be achieved by some User TSconfig without touching the (Extbase) BE Module API.

The suggested syntax is the following.

options.hiddenModules = file, help
options.hiddenModules {
    web = func,info
    system = BelogLog
}

For testing the patch, you do the following:

1. Apply the patch of course

2. Add for your current BE User (or another one) some User TSconfig

# Hide main module "file" + "help" 
options.hiddenModules = file, help

# Append configuration to hide sub-module "func" and "info" 
options.hiddenModules.web := addToList(func,info)

# Hide sub-module BELogLog 
options.hiddenModules.system = BelogLog

3. The same can be get by putting in some ext_tables.php which will then apply to all BE Users.

\TYPO3\CMS\Core\Utility\ExtensionManagementUtility::addUserTSConfig('options.hiddenModules := addToList(file, help)');
\TYPO3\CMS\Core\Utility\ExtensionManagementUtility::addUserTSConfig('options.hiddenModules.web := addToList(func,info)');
\TYPO3\CMS\Core\Utility\ExtensionManagementUtility::addUserTSConfig('options.hiddenModules.system = BelogLog');

As a reminder the patch only influences the visibility of the module and not the access (permission) which still must be done in the ACL as usually.

This all must be documented obviously, but first get it landed before feature freeze.

Patch set 8 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 9 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 10 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 11 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274

Patch set 12 for branch master has been pushed to the review server.
It is available at https://review.typo3.org/24274