Bug #79436
closed
Cannot open TYPO3 Backend from frontend admin panel on "other domain"
Added by Markus Poerschke almost 8 years ago.
Updated almost 7 years ago.
Category:
Backend JavaScript
Description
When accessing the frontend while logged in on a different domain in the backend the user cannot open the backend using the frontend admin panel.
Given there is a multi domain TYPO3 installation:
- There is the host foo.bar and foo.baz.
- The Page "Homepage" is assigned to the host foo.bar.
- The frontend editing is active
When a backend user is now accessing the the backend on foo.baz and selecting the preview button for the "Homepage" then that page will open in a new tab. The host changes to foo.bar. When the user now tries to use the "Open TYPO3 Backend" button nothing happens. A JS error is logged: Error: Permission denied to access property "TS"
The reason for this is that the same origin policy is violated when the frontend tries to access the backedn that is on a different domain.
Related issues
1 (1 open — 0 closed)
In my mind this is not directly related. The other ticket is about the login part. In my example (maybe I missed that point) the Backend User is already logged in.
The same problem occures when the page is open via a <a href="..." target="_blank"> link from a website from another domain. So it is not fully related to multi domain websites.
- Status changed from New to Needs Feedback
Maybe I am wrong, but I guess there is not solution, because of the reason you mentioned.
The only way is to use the same domain. If you have any solution, please tell me.
- Assignee set to Markus Poerschke
This was exactly how we solved the problem for one of our customers. He then was forced to login twice into TYPO3 Backend.
Let me check this ticket again. I think it can be solved by setting the correct "Cross Origin" HTTP headers. The question is only if this is something that needs to be added to the PHP implementation of TYPO3 or if it can be solved by a simple Apache configuration change.
I guess this should be solved by server setup, so apache or nginx config is a good place.
- Status changed from Needs Feedback to Closed
No feedback since 1 month, as mentioned in my last comment I think this should be solved by server configuration.
If you think this should or can be solved in another way, feel free to reopen this issue.
- Related to Feature #86548: Copy / paste Frontend URL and open in Backend added
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by