Bug #56641

FAL: FileListController.php

Added by Rico Sonntag over 5 years ago. Updated 12 months ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
Start date:
2014-03-07
Due date:
% Done:

100%

TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Accessing the file list with an user whom is not allowed to read (user access rights) from a directory results in an uncaught exception.

1. Create a new backend user
2. Disable "Directory: Read" from file operation permissions
3. Switch to new user
4. Try to access filelist module


Related issues

Related to TYPO3 Core - Bug #52720: Uncaught TYPO3 Exception "You are not allowed to access the given folder" Closed 2013-10-12
Related to TYPO3 Core - Bug #54466: Could not find any folder to be displayed Closed 2013-12-17
Related to TYPO3 Core - Bug #61589: non clear error message in FAL if PageTS readonly storage is configured wrong Closed 2014-09-15

Associated revisions

Revision cffc7e65 (diff)
Added by Nicole Cordes over 4 years ago

[BUGFIX] Check access to folder in FileListController

Currently if a folder isn't accessible for the user, the root folder
is taken as fallback solution. But this folder might be inaccessible as
well. This patch adds an access check for the returned folder and
turns thrown errors into flash messages.

Releases: master, 6.2
Resolves: #66693
Resolves: #56641
Change-Id: I310df8061edc790dde1034a27136365b4253ac7f
Reviewed-on: http://review.typo3.org/39108
Reviewed-by: Helmut Hummel <>
Tested-by: Helmut Hummel <>
Reviewed-by: Benjamin Mack <>
Tested-by: Benjamin Mack <>

Revision 57ba6d36 (diff)
Added by Nicole Cordes about 4 years ago

[BUGFIX] Check access to folder in FileListController

Currently if a folder isn't accessible for the user, the root folder
is taken as fallback solution. But this folder might be inaccessible as
well. This patch adds an access check for the returned folder and
turns thrown errors into flash messages.

Releases: master, 6.2
Resolves: #66693
Resolves: #56641
Change-Id: I310df8061edc790dde1034a27136365b4253ac7f
Reviewed-on: http://review.typo3.org/40411
Reviewed-by: Stephan GroƟberndt <>
Reviewed-by: Nicole Cordes <>
Tested-by: Nicole Cordes <>

Revision 0fa28d5f (diff)
Added by Christian Kuhn about 4 years ago

[FOLLOWUP][BUGFIX] Check access to folder in FileListController

Duplicate use flag triggers PHP fatal error.

Change-Id: I4f4c66fa0d8b8ad1a4131a412d8843e930e0a6d2
Releases: 6.2
Resolves: #66693
Resolves: #56641
Reviewed-on: http://review.typo3.org/41428
Reviewed-by: Christian Kuhn <>
Tested-by: Christian Kuhn <>

History

#1 Updated by Rico Sonntag over 5 years ago

Problem occurs either if you click directly on "Filelist" or if you click inside the folder tree.

#2 Updated by Gerrit Code Review over 5 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/28149

#3 Updated by Gerrit Code Review over 5 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/28149

#4 Updated by Gerrit Code Review over 4 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/28149

#5 Updated by Gerrit Code Review over 4 years ago

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#6 Updated by Gerrit Code Review over 4 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#7 Updated by Gerrit Code Review over 4 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#8 Updated by Gerrit Code Review over 4 years ago

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#9 Updated by Gerrit Code Review over 4 years ago

Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#10 Updated by Gerrit Code Review over 4 years ago

Patch set 6 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#11 Updated by Gerrit Code Review over 4 years ago

Patch set 7 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#12 Updated by Gerrit Code Review over 4 years ago

Patch set 8 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/39108

#13 Updated by Nicole Cordes over 4 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

#14 Updated by Gerrit Code Review over 4 years ago

  • Status changed from Resolved to Under Review

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/40411

#15 Updated by Gerrit Code Review over 4 years ago

Patch set 2 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/40411

#16 Updated by Nicole Cordes about 4 years ago

  • Status changed from Under Review to Resolved

#17 Updated by Gerrit Code Review about 4 years ago

  • Status changed from Resolved to Under Review

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41428

#18 Updated by Christian Kuhn about 4 years ago

  • Status changed from Under Review to Resolved

#19 Updated by Gerrit Code Review about 4 years ago

  • Status changed from Resolved to Under Review

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/28149

#20 Updated by Wouter Wolters almost 4 years ago

  • Status changed from Under Review to Resolved

#21 Updated by Benni Mack 12 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF