Actions
Bug #89261
closedEditors can see free mode records (l18n_parent = 0) in list module which they don't have access to
Start date:
2019-09-25
Due date:
% Done:
100%
Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:
Description
Steps to reproduce:
- Create a page in the languages "Default" and "German"
- Create a tt_content record in "Default", then translate it in "free mode" to german.
- Create an editorwith only access to the language "Default" and normal content editing permissions
- Login as the editor and access the list module
List Module:
Editors can see records that were created in free mode event for languages they don't have access permissions to.
These records currently do not show an edit button (which is correct, because the editor doesn't have permissions for this language configured), but still have an editing link on the title. Clicking this link will give the editor an error message "ERROR: Language was not allowed." Obviously the link shouldn't even be rendered.
Actions