Actions
Bug #63337
closed
Missing User-rights-Management: User can edit all extension flexforms without sufficient rights
Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2014-11-26
Due date:
% Done:
0%
Estimated time:
TYPO3 Version:
6.2
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:
Description
Hi,
following situation.
Fresh installation of TYPO3 6.2.6, install the extensions news and macina_bannermanagement ( or any other extensions with flexform configuration )
Create a usergroup and allow them with "[Allow] Insert Plugin" and "[Allow] Bannermodule" to use the Plugin Bannermodule. Now my expectation is, that the user only can insert/read/update/delete the Plugin Bannermodule,
BUT he can also edit the flexform of News and any other Extensions with flexform configuration, which insert a User or Admin with sufficient rights.
The DropDown of plugins has the value "[ INVALID VALUE ("news_pi1") ]" but the User can save and change any configuration.
Best Regards
Sven
Updated by 
Updated by 
Updated by 
Updated by
Actions