Project

General

Profile

Actions

Bug #89261

closed

Editors can see free mode records (l18n_parent = 0) in list module which they don't have access to

Added by Christian Eßl over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Category:
Backend API
Target version:
-
Start date:
2019-09-25
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Steps to reproduce:

  • Create a page in the languages "Default" and "German"
  • Create a tt_content record in "Default", then translate it in "free mode" to german.
  • Create an editorwith only access to the language "Default" and normal content editing permissions
  • Login as the editor and access the list module

List Module:

Editors can see records that were created in free mode event for languages they don't have access permissions to.

These records currently do not show an edit button (which is correct, because the editor doesn't have permissions for this language configured), but still have an editing link on the title. Clicking this link will give the editor an error message "ERROR: Language was not allowed." Obviously the link shouldn't even be rendered.


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #89279: Editor can see "Edit" link in context menu for records he has no access toClosedChristian Eßl2019-09-25

Actions
Related to TYPO3 Core - Bug #89307: List Module shows edit action icon even if User has no edit permissionClosed2019-09-30

Actions
Actions #1

Updated by Christian Eßl over 4 years ago

  • Description updated (diff)
  • Is Regression deleted (Yes)
Actions #2

Updated by Gerrit Code Review over 4 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61832

Actions #3

Updated by Christian Eßl over 4 years ago

  • Related to Bug #89279: Editor can see "Edit" link in context menu for records he has no access to added
Actions #4

Updated by Christian Eßl over 4 years ago

  • Assignee set to Christian Eßl
Actions #5

Updated by Christian Eßl over 4 years ago

  • Description updated (diff)
Actions #6

Updated by Christian Eßl over 4 years ago

  • Category set to Backend API
Actions #7

Updated by Gerrit Code Review over 4 years ago

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61923

Actions #8

Updated by Christian Eßl over 4 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #9

Updated by Gerrit Code Review over 4 years ago

  • Status changed from Resolved to Under Review

Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436

Actions #10

Updated by Gerrit Code Review over 4 years ago

Patch set 2 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436

Actions #11

Updated by Gerrit Code Review over 4 years ago

Patch set 3 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/62436

Actions #12

Updated by Daniel Goerz over 4 years ago

  • Status changed from Under Review to Resolved
Actions #13

Updated by Benni Mack over 4 years ago

  • Status changed from Resolved to Closed
Actions #14

Updated by Georg Ringer over 4 years ago

  • Related to Bug #89307: List Module shows edit action icon even if User has no edit permission added
Actions

Also available in: Atom PDF