Bug #83694

Epic #90674: Backend UI not reflecting permissions

Do not show delete option when user has no delete permissions

Added by Tymoteusz Motylewski over 2 years ago. Updated about 2 months ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
Pagetree
Target version:
-
Start date:
2018-01-26
Due date:
% Done:

100%

TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

In v9 the page tree shows the red delete area even if the user doesn't have rights to delete a page.

The same problem is with drag-drop.
user without edit permissions should not be able to drag pages around.


Related issues

Related to TYPO3 Core - Bug #25135: Pagetree - Drag and drop only works for BE-Users with delete-permissions Closed 2011-02-22

Associated revisions

Revision c900fd06 (diff)
Added by Christian Eßl 3 months ago

[BUGFIX] Do not show page delete area if user is lacking permissions

When dragging a page in the page tree, users would always see the red
delete area, even if they do not have the permissions to delete the
page. This is fixed now.

Resolves: #83694
Releases: master, 9.5
Change-Id: Ibd8de52d529405ab57b022e854e361da69e4d3bc
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63596
Reviewed-by: Oliver Bartsch <>
Reviewed-by: Benni Mack <>
Reviewed-by: Frank Nägler <>
Tested-by: TYPO3com <>
Tested-by: Oliver Bartsch <>
Tested-by: Frank Nägler <>

Revision cf0f7afb (diff)
Added by Christian Eßl 3 months ago

[BUGFIX] Do not show page delete area if user is lacking permissions

When dragging a page in the page tree, users would always see the red
delete area, even if they do not have the permissions to delete the
page. This is fixed now.

Resolves: #83694
Releases: master, 9.5
Change-Id: Ibd8de52d529405ab57b022e854e361da69e4d3bc
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63715
Tested-by: Frank Nägler <>
Tested-by: TYPO3com <>
Reviewed-by: Frank Nägler <>

History

#1 Updated by Tymoteusz Motylewski over 2 years ago

  • Related to Bug #25135: Pagetree - Drag and drop only works for BE-Users with delete-permissions added

#2 Updated by Riccardo De Contardi 3 months ago

This is still an issue with TYPO3 10.4.0-dev;

it is true that a notification message is shown when the editor tries to delete a page without permissions, but it should be better to avoid showing the editor a functionality and tell him later that he was not supposed to use it ;)

#3 Updated by Gerrit Code Review 3 months ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63596

#4 Updated by Riccardo De Contardi 3 months ago

  • Parent task set to #90674

#5 Updated by Gerrit Code Review 3 months ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63596

#6 Updated by Gerrit Code Review 3 months ago

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/63715

#7 Updated by Christian Eßl 3 months ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100

#8 Updated by Benni Mack about 2 months ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF