TYPO3 Core

How do we want to/can we deal with this? Automatically also select "Insert plugin" upon safe if one or more plugins are allowed? It makes no real sense to be able to allow "Insert plugin" without activating a certain plugin. But even more it does not make sense to allow one or more plugins and not activate "Insert plugin", right?

I suggest to just add a static textbox (flashmessage) above the allow plugin dialog, stating that the administrator should make sure to set allow plugin too.

this is still valid for 6.2.14 and 7 (latest master)
steps to reproduce:

1) install a plugin like "news"
2) add an editors usergroup
3) assign everything to the group (modules, tables listing, tables modify, allowed excludefields, etc) BUT...
3.1) be sure to set this:

Explicitly allow/deny field values:
- insert plugin: NOT CHECKED
- Page Content: Plugin:News system: CHECKED
4) create user editor and assign the group
5) put the news plugin to page
6) login as editor

Result: you can't modify the plugin CE from "page" module; if you try to modify it from "list" module you get the error:

Sorry, you didn't have proper permissions to perform this change.

Reason: ERROR: authMode "explicitAllow" failed for field "CType" with value "list" evaluated

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41116

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41116

Patch set 4 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at http://review.typo3.org/41116