TYPO3 Core

With a normal backend user it isn't possible to delete files, if the assigned sys_filemount path is not set to "/".

Way to reproduce:

• create a sys_filemount with a path not "/" (e.g. "/user_upload/").
• assign to a not admin backend user
• give full access for file permissions
• upload a new file (to wherever you want)
• try to delete a file -> resumes to error #1375955684

#1375955684: You are not allowed to access the given folder: "" (More information)

TYPO3\CMS\Core\Resource\Exception\InsufficientFolderAccessPermissionsException thrown in file
vendor/typo3/cms/typo3/sysext/core/Classes/Resource/ResourceStorage.php in line 765.

debugging the Method shows, that the system bubbles the folders up to "/" for checking the access. "/" is not allowed, because sys_filemount path is "/user_upload/". The backend user can't delete his own files.

I created a folder and deleted it. This worked fine.