Bug #89279
closedEditor can see "Edit" link in context menu for records he has no access to
100%
Description
The following scenario:
- Create a page in the languages "Default" and "German"
- Create a tt_content record in "Default", then translate it in "free mode" to german.
- Create an editorwith only access to the language "Default" and normal content editing permissions
- Login as the editor and access the list module
Because the record is in "free mode", the editor can still see the record in the list, but has no edit permissions. (The edit button in the control panel is missing).
However when opening the context menu of the record by clicking on the icon on the left, there is still an "Edit" link in the context menu. If clicked, the editor will see the error "ERROR: Language was not allowed.".
Updated by Christian Eßl about 5 years ago
- Related to Bug #89261: Editors can see free mode records (l18n_parent = 0) in list module which they don't have access to added
Updated by Gerrit Code Review about 5 years ago
- Status changed from New to Under Review
Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61833
Updated by Christian Eßl about 5 years ago
- Target version changed from Candidate for patchlevel to next-patchlevel
Updated by Gerrit Code Review about 5 years ago
Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61920
Updated by Gerrit Code Review about 5 years ago
Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61921
Updated by Christian Eßl about 5 years ago
- Status changed from Under Review to Resolved
- % Done changed from 0 to 100
Applied in changeset da2e3e803646c67672ba9b246a1ba3671c206793.