Project

General

Profile

Actions

Bug #87262

closed

Wrong permissions calculated for sys_file_reference record in sys_file_metadata record

Added by Kai Strecker almost 6 years ago. Updated almost 3 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
Backend API
Target version:
-
Start date:
2018-12-21
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

We extended the sys_file_metadata table with an extension, so we can manually set a preview image for files like pdfs.

When we edit a file, we can now create a sys_file_reference in its sys_file_metadata record. But for those sys_file_reference records, the edit permissions are calculated incorrectly.

The problem is in file typo3/sysext/backend/Classes/Form/Container/InlineRecordContainer.php in line 535.

When you are editing a sys_file_reference record, the edit permissions are calculated by the permissions set on the page, on which the sys_file_reference record is.

But if you edit a sys_file_reference while being in the file list, your sys_file_reference is not on a page.

In my opinion this requires an additional check, whether the sys_file_reference record is on a page.

Actions #1

Updated by Susanne Moog over 4 years ago

  • Status changed from New to Needs Feedback

Can you provide your example extension / an example extension with which reproducing and fixing the issue can be tested?

Actions #2

Updated by Christian Kuhn almost 3 years ago

  • Status changed from Needs Feedback to Closed

hey. i hope it is ok to close here for now: this detail will be hard to reproduce and look at without code examples and further elaboration of the author. in case this is still a problem, we may want to restart with a fresh issue.

Actions

Also available in: Atom PDF