Project

General

Profile

Actions
Copy link

Feature #90778

closed

Integrate sudo mode for user tables

Added by Oliver Hader over 4 years ago. Updated over 4 years ago.

Status:
Rejected
Priority:
Should have
Assignee:
Oliver Hader
Category:
Security
Target version:
-
Start date:
2020-03-18
Due date:
% Done:

0%

Estimated time:
PHP Version:
7.2
Tags:
Complexity:
Sprint Focus:

Description

Brief description

  • in TYPO3 backend
  • before modifications to user-related records are persisted, the system shall request a password confirmation ("sudo mode")
  • this procedure currently focuses on user-permissions only, but could be extended for data-privacy aspects as well

Components

  • modifications of TYPO3 v10 and v9 in order to support replaying a request based on a server request instruction (see patch)
  • actual implementation as TYPO3 extension at https://github.com/FriendsOfTYPO3/sudo-mode (experimental currently)

References

Screenshots

Backend admin is editing another backend user - before changes are persisted the following password confirmation dialog needs to be completed.

Files

Download all files
sudo-1.png (121 KB) sudo-1.png Oliver Hader, 2020-03-18 13:46
sudo-2.png (88.2 KB) sudo-2.png Oliver Hader, 2020-03-18 13:46
Actions
Copy link

Also available in: Atom PDF