Project

General

Profile

Actions

Bug #8743

closed

Autopublication scheduler task has too many rights

Added by Francois Suter over 14 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Must have
Assignee:
-
Category:
Workspaces
Target version:
-
Start date:
2010-07-08
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

From the related bug report (http://bugs.typo3.org/view.php?id=15048):

Inside the Scheduler task for autopublication of workspaces, the user rights are temporarily set to admin, but they are not lowered again (if needed). This was not really an issue when this piece of code was called by a CLI script. However now that it is a Scheduler task, the proper rights must be reset when the task is finished, otherwise any Scheduler that may follow will be executed with admin rights too.

The really clean solution would be not to need admin rights at all, but I couldn't figure out the proper rights set up for this. I managed to have a user with rights to the workspaces and rights to publish, but it could not publish from the Live workspace, only from the relevant workspace. The error messages were rather weird, complaining about the user not having rights to change permissions... I don't if this is a bug or if I just had a wrong setup.

Anyway I would be glad if you could take a look at RFC #15048 in the Core list and either vote for it or come up with a better solution.

Thanks.

Actions

Also available in: Atom PDF