Bug #92762: Accessing a restricted subpage of a sysfolder triggers a 404 instead of 403 - TYPO3 Core - TYPO3 Forge

Custom queries

12 LTS
Accessibility
Dashboard issues
Easy tasks
Extbase Issues
FAL Issues
FAL Sprint 2023
Hierarchical Issues
Issues reported for v11
JavaScript issues
JavaScript Issues (w/o Epics/Stories)
Most wanted Bugfixes
Most wanted Features
My open issues
New & Unassigned
No feedback within 90 days
Open Bugs
Open issues of 10
Page Tree Regressions after 2020-07-28
Recently modified
Regressions
Stabilization Issues

Watchers (5)

Benni Mack
Benoit Chenu
Marc Hirdes
Markus Klein
Oliver Hader

Actions

Copy link

Bug #92762

closed

Accessing a restricted subpage of a sysfolder triggers a 404 instead of 403

Added by Rémy DANIEL over 3 years ago. Updated over 1 year ago.

Status:

Closed

Priority:

Should have

Assignee:

Category:

Frontend

Target version:

Start date:

2020-11-03

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

Complexity:

medium

Is Regression:

Yes

Sprint Focus:

Description

On TYPO3 9, accessing a restricted subpage of a sysfolder triggered a 403.
On TYPO3 10, a 404 is triggered.

This is a regression introduced in https://review.typo3.org/c/Packages/TYPO3.CMS/+/58829

How to reproduce

With the following page tree:

Rootpage
- page 1 (public, enabled)
- sysfolder 3 (enabled)
-- subpage 2 (restricted to authenticated users, enabled)

Without a frontend session, access the subpage 2 triggers a 404.

What should I see?

Without a frontend session, access the subpage B should trigger a 403.

Related issues 5 (0 open — 5 closed)

Related to TYPO3 Core - Task #92225: Add test previewing created hidden page & content in workspace

Closed

Benni Mack

2020-09-07

Actions

Related to TYPO3 Core - Bug #86346: Hidden pages sent 403 Header

Closed

2018-09-21

Actions

Related to TYPO3 Core - Bug #18079: slide of cObj CONTENT stops if sysfolder in rootline

Closed

2008-01-30

Actions

Related to TYPO3 Core - Feature #20933: Enable working with SysFolders in CONTENT

Closed

2009-08-26

Actions

Related to TYPO3 Core - Bug #93229: Page with access restriction throws 404 if parent is a folder

Closed

2021-01-06

Actions

Issue # Delay: days Cancel

History
Notes
Property changes
Associated revisions

Actions

Copy link

Updated by Rémy DANIEL over 3 years ago

Related to Task #92225: Add test previewing created hidden page & content in workspace added

Actions

Copy link

Updated by Rémy DANIEL over 3 years ago

Related to Bug #86346: Hidden pages sent 403 Header added

Actions

Copy link

Updated by Benoit Chenu over 3 years ago

I think the issue was introduced here :

https://review.typo3.org/c/Packages/TYPO3.CMS/+/64038/5/typo3/sysext/frontend/Classes/Controller/TypoScriptFrontendController.php

Related to this issue :

https://forge.typo3.org/issues/18079

If we remove the condition on DOKTYPE_SYSFOLDER, TYPO3 send a 403 as expected :

< if ($this->page['doktype']  PageRepository::DOKTYPE_SPACER || $this->page['doktype']  PageRepository::DOKTYPE_SYSFOLDER) {
 > if ($this->page['doktype'] == PageRepository::DOKTYPE_SPACER) {

Actions

Copy link

Updated by Benoit Chenu over 3 years ago

Related to Bug #18079: slide of cObj CONTENT stops if sysfolder in rootline added

Actions

Copy link

Updated by Markus Klein over 3 years ago

Related to Feature #20933: Enable working with SysFolders in CONTENT added

Actions

Copy link

Updated by Marc Hirdes almost 3 years ago

A fix would be great

Actions

Copy link

Updated by Gerrit Code Review almost 3 years ago

Status changed from New to Under Review

Patch set 1 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/69306

Actions

Copy link

Updated by Gerrit Code Review over 2 years ago

Patch set 2 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/69306

Actions

Copy link

Updated by Gerrit Code Review over 2 years ago

Patch set 3 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/69306

Actions

Copy link

#10

Updated by Gerrit Code Review over 2 years ago

Patch set 5 for branch master of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/69306

Actions

Copy link

#11

Updated by Gerrit Code Review over 2 years ago

Patch set 1 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/71362

Actions

Copy link

#12

Updated by Benni Mack over 2 years ago

Status changed from Under Review to Resolved
% Done changed from 0 to 100

Applied in changeset 463597c18974c119cde27502a31b59c3f9fc4b67.

Actions

Copy link

#13

Updated by Gerrit Code Review over 2 years ago

Status changed from Resolved to Under Review

Patch set 2 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/71362

Actions

Copy link

#14

Updated by Gerrit Code Review over 2 years ago

Patch set 3 for branch 10.4 of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/71362

Actions

Copy link

#15