TYPO3 Core

On version 13 there is a regression , AFAICS:

My test¶

1) Create a usergroup "test" give full access except [file_permissions] : do not check Files: Replace [replaceFile]; give proper permissions to at least a page, mount points
2) Create a user "test" belonging to group "test"
3) Switch user > "test"
4) Filelist module > Upload a file e.g. "logo.png" > OK
5) Try to upload a file with the same name
6) Select "overwrite" on the modal window

7) Continue with the action

Result:

The file is actually uploaded, it seems that the permissions are not taken into consideration at all

Test 2¶

(Steps 1-3 done before)
4) Go to a page accessible for "test" user and create a Content Element ("Text and Image"
5) Add the "logo.png" image, save
6) Click to add another file, on the modal window choose to upload a file with the same name ("logo.png") on the folder where the other is saved
7) mind to flag "overwrite existing file" see screenshot:

8) Click on "upload"

Result:

The file is actually uploaded, it seems that

a) The modal shown on cattura1.png is not called (UX inconsistency)
b) the permissions are not taken into consideration at all as on the first test.

NOTE¶

If you repeat "test 2" but don't check "overwrite existing file" an error is shown:

But the error seems independent from the permissions given (it occurs also with an admin user) - but I don't understand what it means. Shouldn't the file be renamed?