Project

General

Profile

Actions
Copy link

Bug #87048

closed

File search searches in forbidden folders => InsufficientFolderAccessPermissionsException

Added by Philipp Seiler over 5 years ago. Updated over 1 year ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
File Abstraction Layer (FAL)
Target version:
-
Start date:
2018-11-30
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
11
PHP Version:
Tags:
search
Complexity:
Is Regression:
Sprint Focus:

Description

- A backend user has certain folder permissions in fileadmin, not the whole fileadmin directory.
- User searches in one of those folders, e.g. the letter "a".
- Within the searched folder, any file containing the letters "a" will be found.

- However: TYPO3 also searches for files by metadata!
- This includes files in user_upload directory.
- Any file in user_upload with the letter "a" will be found as well!
- user_upload is however not accessible by the user
- Therefore \TYPO3\CMS\Core\Resource\Exception\InsufficientFolderAccessPermissionsException is thrown.

Problem originates from \TYPO3\CMS\Core\Resource\FileRepository:
Here the searchByName-Method not only searches in the selected directory, but also metadata:

$fileRecords = $this->getFileIndexRepository()->findByFolders($folders, false, $fileName);
$fileRecords = array_merge($fileRecords, $this->getFileIndexRepository()->findBySearchWordInMetaData($fileName));

Quick solution

Simply remove the line which searches in metadata.

Proper solution

Respect accessible/forbidden folders when searching for files in the backend.

Related issues 2 (0 open — 2 closed)

Related to TYPO3 Core - Bug #87610: Filelist Search - Add constraint to avoid searching of records marked as missing.Closed2019-02-01

Actions
Related to TYPO3 Core - Bug #98423: The file tree search function in the filelist module only considers first filemount per storageResolved2022-09-22

Actions
Actions
Copy link

Also available in: Atom PDF