Bug #89261
closed
Editors can see free mode records (l18n_parent = 0) in list module which they don't have access to
100%
Description
Steps to reproduce:
- Create a page in the languages "Default" and "German"
- Create a tt_content record in "Default", then translate it in "free mode" to german.
- Create an editorwith only access to the language "Default" and normal content editing permissions
- Login as the editor and access the list module
List Module:
Editors can see records that were created in free mode event for languages they don't have access permissions to.
These records currently do not show an edit button (which is correct, because the editor doesn't have permissions for this language configured), but still have an editing link on the title. Clicking this link will give the editor an error message "ERROR: Language was not allowed." Obviously the link shouldn't even be rendered.
Updated by Christian Eßl over 4 years ago
- Description updated (diff)
- Is Regression deleted (
Yes)
Updated by Gerrit Code Review over 4 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61832
Updated by Christian Eßl over 4 years ago
- Related to Bug #89279: Editor can see "Edit" link in context menu for records he has no access to added
Updated by Gerrit Code Review over 4 years ago
Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61923
Updated by Christian Eßl over 4 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset 57aee0aab53acb124ce29e27dd1bf457b365df80.
Updated by Gerrit Code Review over 4 years ago
- Status changed from Resolved to Under Review
Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436
Updated by Gerrit Code Review over 4 years ago
Patch set 2 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436
Updated by Gerrit Code Review over 4 years ago
Patch set 3 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436
Updated by Daniel Goerz over 4 years ago
- Status changed from Under Review to Resolved
Applied in changeset 8860c6229e3a0bc36fbe0fef10635ae20bbfaa60.
Updated by
Updated by Georg Ringer about 4 years ago
- Related to Bug #89307: List Module shows edit action icon even if User has no edit permission added