Project

General

Profile

Actions

Bug #80210

closed

Online media preview image generation fails if read permission for the video files are missing

Added by Andreas Allacher about 7 years ago. Updated 7 months ago.

Status:
Resolved
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
-
Start date:
2017-03-09
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
7
PHP Version:
Tags:
Complexity:
Is Regression:
No
Sprint Focus:

Description

If a user adds a video (e.g. YouTube) to a content element and places that in the folder "foo".

Then you clear the processed files in the Install tool and use another user that has no access at all to the folder "foo" (e.g. outside folder mounts),
accessing the page using the page module or editing the content element will result in an exception.

The reason is that the online media helpers use getContents (to retrieve the online media ID) on the .youtube file which calls assureFileReadPermission()
when retrieving the corresponding preview image.

Actions #1

Updated by Gerrit Code Review 7 months ago

  • Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/81117

Actions #2

Updated by Gerrit Code Review 7 months ago

Patch set 1 for branch 12.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/81135

Actions #3

Updated by Oliver Bartsch 7 months ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions

Also available in: Atom PDF