TYPO3 Core

We extended the sys_file_metadata table with an extension, so we can manually set a preview image for files like pdfs.

When we edit a file, we can now create a sys_file_reference in its sys_file_metadata record. But for those sys_file_reference records, the edit permissions are calculated incorrectly.

The problem is in file typo3/sysext/backend/Classes/Form/Container/InlineRecordContainer.php in line 535.

When you are editing a sys_file_reference record, the edit permissions are calculated by the permissions set on the page, on which the sys_file_reference record is.

But if you edit a sys_file_reference while being in the file list, your sys_file_reference is not on a page.

In my opinion this requires an additional check, whether the sys_file_reference record is on a page.