Bug #79309

Deleting of a page by a non-admin user throws exception

Added by Philipp Faber over 2 years ago. Updated 9 months ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
-
Target version:
-
Start date:
2017-01-13
Due date:
% Done:

100%

TYPO3 Version:
8
PHP Version:
7.0
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

Somehow only admins can delete pages. I checked access module and pages can be modified (created, moved, renamed, etc.). Everything works, except deleting the page.

This exception is thrown:

Exception

An exception occurred while executing 'SELECT COUNT(`uid`) FROM `be_groups` WHERE (`pid` IN (:dcValue1)) AND (`be_groups`.`deleted` = 0)' with params ["40"]: 

PHP Warning: Invalid argument supplied for foreach() in E:\xampp\htdocs\site.com\web\typo3_src-8.5.1\vendor\doctrine\dbal\lib\Doctrine\DBAL\SQLParserUtils.php line 178

screen_1484311125.jpg View (48 KB) Philipp Faber, 2017-01-13 13:40


Related issues

Duplicated by TYPO3 Core - Bug #79577: Non admin BE user can not delete pages and some other records Closed 2017-02-01

Associated revisions

Revision fdd4e302 (diff)
Added by Mona Muzaffar over 2 years ago

[BUGFIX] Access check for delete pages expects array of integers

An error occurs in the createNamedParameter function
which expects an array but gets a string instead.

Change-Id: I393a6a87c912129ded28f677ca65c081fc4205e7
Resolves: #79309
Releases: master
Reviewed-on: https://review.typo3.org/51342
Tested-by: TYPO3com <>
Reviewed-by: Anja Leichsenring <>
Tested-by: Anja Leichsenring <>
Reviewed-by: Christian Kuhn <>
Tested-by: Christian Kuhn <>

History

#1 Updated by Riccardo De Contardi over 2 years ago

I can confirm it with the latest master 8.6-dev

Steps to reproduce

1) create a "editors" group and give full ACL privileges
2) add an "editor" user to "editors"
3) create a page; In access module > give the page:
- owner: admin
- group:editors and full privileges (also delete)

3.1) try to delete the page

RESULT: you obtain the error:

An exception occurred while executing 'SELECT COUNT(`uid`) FROM `be_groups` WHERE (`pid` IN (?)) AND (`be_groups`.`deleted` = 0)':

4) create a page; In access module > give it:
- owner:editor and full privileges
- group: editors, without delete privilege
4.1) try to delete the page

RESULT: you obtain the error:

An exception occurred while executing 'SELECT COUNT(`uid`) FROM `be_groups` WHERE (`pid` IN (?)) AND (`be_groups`.`deleted` = 0)':

#2 Updated by Mona Muzaffar over 2 years ago

  • Status changed from New to Accepted

#3 Updated by Gerrit Code Review over 2 years ago

  • Status changed from Accepted to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51342

#4 Updated by Gerrit Code Review over 2 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51342

#5 Updated by Gerrit Code Review over 2 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/51342

#6 Updated by Mona Muzaffar over 2 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

#7 Updated by Benni Mack 9 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF