Project

General

Profile

Actions

Bug #89261

closed

Editors can see free mode records (l18n_parent = 0) in list module which they don't have access to

Added by Christian Eßl over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Category:
Backend API
Target version:
-
Start date:
2019-09-25
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

Steps to reproduce:

  • Create a page in the languages "Default" and "German"
  • Create a tt_content record in "Default", then translate it in "free mode" to german.
  • Create an editorwith only access to the language "Default" and normal content editing permissions
  • Login as the editor and access the list module

List Module:

Editors can see records that were created in free mode event for languages they don't have access permissions to.

These records currently do not show an edit button (which is correct, because the editor doesn't have permissions for this language configured), but still have an editing link on the title. Clicking this link will give the editor an error message "ERROR: Language was not allowed." Obviously the link shouldn't even be rendered.


Related issues 2 (0 open2 closed)

Related to TYPO3 Core - Bug #89279: Editor can see "Edit" link in context menu for records he has no access toClosedChristian Eßl2019-09-25

Actions
Related to TYPO3 Core - Bug #89307: List Module shows edit action icon even if User has no edit permissionClosed2019-09-30

Actions
Actions

Also available in: Atom PDF