TYPO3 Core

In my installation I have this configuration:

$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['allow'] = 'png,gif,jpg,jpeg,pdf,tif,tiff,bmp,doc,docx,xls,xlsx,csv';
$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['deny'] = '*';

This works in TYPO3 6.2.x.
In TYPO3 7.6.11 upload of .pdf for example non-admin user is possible. But replacing the same file as non-admin user is not possible.

Workaround

$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['allow'] = 'png,gif,jpg,jpeg,pdf,tif,tiff,bmp,doc,docx,xls,xlsx,csv';
$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['deny'] = '';

I made a fresh installation TYPO3 7.6.14

Adding like described in typo3conf/AdditionalConfiguration.php:

<?php
if (!defined ('TYPO3_MODE')) {
    die ('Access denied.');
}

$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['allow'] = 'png,gif,jpg,jpeg,pdf,tif,tiff,bmp,doc,docx,xls,xlsx,csv';
$GLOBALS['TYPO3_CONF_VARS']['BE']['fileExtensions']['webspace']['deny'] = '*';

BE group with permission to replace file. BE user not. This BE user can upload a .jpg file, but can't replace the same file. Replace seems to does not accepts same file types as upload does, if you have restrictions described above.

Can you reproduce it?

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52379

Patch set 1 for branch TYPO3_7-6 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52388

Patch set 2 for branch TYPO3_7-6 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52388

Patch set 1 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52389

Patch set 2 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52389

Patch set 3 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52389

Patch set 4 for branch TYPO3_6-2 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/52389