Project

General

Profile

Actions

Bug #89279

closed

Editor can see "Edit" link in context menu for records he has no access to

Added by Christian Eßl over 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Should have
Category:
Backend API
Target version:
Start date:
2019-09-25
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The following scenario:

  • Create a page in the languages "Default" and "German"
  • Create a tt_content record in "Default", then translate it in "free mode" to german.
  • Create an editorwith only access to the language "Default" and normal content editing permissions
  • Login as the editor and access the list module

Because the record is in "free mode", the editor can still see the record in the list, but has no edit permissions. (The edit button in the control panel is missing).
However when opening the context menu of the record by clicking on the icon on the left, there is still an "Edit" link in the context menu. If clicked, the editor will see the error "ERROR: Language was not allowed.".


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #89261: Editors can see free mode records (l18n_parent = 0) in list module which they don't have access toClosedChristian Eßl2019-09-25

Actions
Actions #1

Updated by Christian Eßl over 4 years ago

  • Related to Bug #89261: Editors can see free mode records (l18n_parent = 0) in list module which they don't have access to added
Actions #2

Updated by Gerrit Code Review over 4 years ago

  • Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61833

Actions #3

Updated by Christian Eßl over 4 years ago

  • Assignee set to Christian Eßl
Actions #4

Updated by Christian Eßl over 4 years ago

  • Target version changed from Candidate for patchlevel to next-patchlevel
Actions #5

Updated by Christian Eßl over 4 years ago

  • Category set to Backend API
Actions #6

Updated by Gerrit Code Review over 4 years ago

Patch set 1 for branch 9.5 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61920

Actions #7

Updated by Gerrit Code Review over 4 years ago

Patch set 1 for branch TYPO3_8-7 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/61921

Actions #8

Updated by Christian Eßl over 4 years ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #9

Updated by Benni Mack about 4 years ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF