Project

General

Profile

Actions

Bug #90349

closed

conflicting permissions when UID in pages_language_overlay and PID in pages coincide

Added by Barbara Reiter about 4 years ago. Updated about 4 years ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
-
Start date:
2020-02-10
Due date:
% Done:

0%

Estimated time:
TYPO3 Version:
8
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

In a multidomain setup with different permission groups and backend users, an alternative page language record has the same UID as the PID of another page.
The relevant pages are part of different permission groups.

The user has permission to edit page A and should therefore be able to edit it's translation, but he has no permission for page B.

The user tries to edit the alternative page language of page A, which he has permission for but gets an error that he has no permission to do so, with the UID of the translation(page A)/the PID of the coinciding page (page B) being quoted in the error.

It seems as if Typo3 interprets the action as the user trying to access the page with the PID they have no permission for (page B), when they are only trying to access the translation of a page they do have permission for (page A).

Steps to reproduce:
  • Create a page (assuming PID 1)
  • Create second page (assuming PID 2)
  • localize second page into other language
  • check if UID of translation is the same as PID of first page (PID 1)
  • create a backend user with the permission for translations and second page, but not first page
  • try to edit the translation
  • User should get an error similar to attached screenshot

Files

permission_error.PNG (4.24 KB) permission_error.PNG Barbara Reiter, 2020-02-10 11:15
Actions

Also available in: Atom PDF