Feature #93891
closed
Do not unset logged in user from system maintainers
0%
Description
I have logged in as the backend admin as user "admin" who is automatically the system maintainer.
Now I create a second admin "franz" and give him the admin rights. Now I use the ADMIN TOOLS > Settings > Manage System Maintainers and add "franz" there.
Now I go back into the backend.
Now I am perplexed.
- #1504804727 RuntimeException
*This module "tools_ExtensionmanagerExtensionmanager" is only available as system maintainer *
see https://github.com/TYPO3-Documentation/TYPO3CMS-Exceptions/pull/16/files
TYPO3 should not have allowed to remove myself from the system maintainers. Or at least a warning should have been given. I just did not know that I must also add "admin" go the system maintainers at the moment when I add the user "franz" there.
Updated by Riccardo De Contardi 8 months ago
- Status changed from New to Needs Feedback
Is this still preproducble on TYPO3 12? I tried without success... can you add a step-by-step guide on how to reproduce it?
Updated by Georg Ringer about 2 months ago
- Status changed from Needs Feedback to Closed
Hey Franz,
I am closing this issue. this sound like the single edge case described in \TYPO3\CMS\Core\Authentication\BackendUserAuthentication::isSystemMaintainer. so if no system maintainers defined yet, any admin is allowed. so if you configure now one system maintainer, suddenly the admin doesn't have access to the system maintainer modules.
this is desired and won't change.
feel free to discuss on slack or via mail if you got further questions