Bug #89006

Page unavailable exception is thrown when the root page if fe group protected

Added by Helmut Hummel over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2019-08-23
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

There currently are two scenarios where TYPO3 fails to trigger an access denied error and instead triggers a service unavailable error:

Szenario 1

  • Root page is only accessible for a fe group
  • A login page below that page is not access protected so that users can log in to view the root page

Expectation:

When the root page is accessed an access denied error action is triggered, so that an according error handler could for example redirect to a login page

Actual behaviour:

When the root page is accessed a service unavailable error action is triggered.

Szenario 2

  • Root page is only accessible for a fe group and extendToSubpages is set
  • Access to the page (and all pages below) is granted by a SAML SSO authentication mechanism (no login page required, as this happens at the identity provider)

Expectation:

When the root page is accessed an access denied error action is triggered, so that an according error handler could for example redirect to a login page

Actual behaviour:

When the root page is accessed a service unavailable error action is triggered.


Related issues

Related to TYPO3 Core - Bug #88957: ID was not an accessible page - on hidden pages although the 404 error handler is configured in the site configClosed2019-08-14

Actions
#1

Updated by Helmut Hummel over 1 year ago

  • Description updated (diff)
#2

Updated by Gerrit Code Review over 1 year ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61531

#3

Updated by Gerrit Code Review over 1 year ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61531

#4

Updated by Anja Leichsenring over 1 year ago

  • Related to Bug #88957: ID was not an accessible page - on hidden pages although the 404 error handler is configured in the site config added
#5

Updated by Gerrit Code Review over 1 year ago

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61596

#6

Updated by Helmut Hummel over 1 year ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
#7

Updated by Benni Mack about 1 year ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF