Bug #89240
closed
Epic #90674: Backend UI not reflecting permissions
"Edit page properties" icon is displayed, even if page editing is not allowed for user
Added by Sybille Peters over 4 years ago.
Updated over 2 years ago.
Category:
Backend User Interface
Description
Reproduce¶
- Create a user / group which does not have access to editing pages (pages not set in tables_modify)
- Switch to this user
- Select page
- Click on "Edit page properties"
Empty form appears. Also a reload animation is shown and does not end.
System¶
Used current TYPO3 master (10.1.0-dev).
Files
Related issues
1 (1 open — 0 closed)
- Status changed from New to Needs Feedback
Hi, can you test if it has been solved with #88337 ?
If not, please I'd ask you to write in detail how to reproduce it; for example, where did you click to edit the page properties?
The patch 60937 referring to issue 88337 has been merged, so I assume I should test with master.
I can still reproduce the problem described in this issue with master: I still get the load animation if I click on pencil icon to edit a page the editor has no permission to (with "switch user").
IMHO, an editor with no write access to a page should not see the pencil icon at all.
- Status changed from Needs Feedback to New
- Status changed from New to Under Review
- Related to Bug #90178: Page edit button in page module is not using BackendUserAuthentication::recordEditAccessInternals() for checking access permissions added
- Parent task set to #90674
The same error occurs in the list module
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
- Status changed from Resolved to Closed
Also available in: Atom
PDF
Updated by 
Updated by 
Updated by 
Updated by 
Updated by 
Updated by