Project

General

Profile

Actions

Bug #89279

closed

Editor can see "Edit" link in context menu for records he has no access to

Added by Christian Eßl over 4 years ago. Updated over 4 years ago.

Status:
Closed
Priority:
Should have
Category:
Backend API
Target version:
Start date:
2019-09-25
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
9
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The following scenario:

  • Create a page in the languages "Default" and "German"
  • Create a tt_content record in "Default", then translate it in "free mode" to german.
  • Create an editorwith only access to the language "Default" and normal content editing permissions
  • Login as the editor and access the list module

Because the record is in "free mode", the editor can still see the record in the list, but has no edit permissions. (The edit button in the control panel is missing).
However when opening the context menu of the record by clicking on the icon on the left, there is still an "Edit" link in the context menu. If clicked, the editor will see the error "ERROR: Language was not allowed.".


Related issues 1 (0 open1 closed)

Related to TYPO3 Core - Bug #89261: Editors can see free mode records (l18n_parent = 0) in list module which they don't have access toClosedChristian Eßl2019-09-25

Actions
Actions

Also available in: Atom PDF