Project

General

Profile

Actions

Feature #93891

closed

Do not unset logged in user from system maintainers

Added by Franz Holzinger over 3 years ago. Updated about 1 month ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
-
Target version:
Start date:
2021-04-09
Due date:
% Done:

0%

Estimated time:
PHP Version:
7.4
Tags:
Complexity:
Sprint Focus:

Description

I have logged in as the backend admin as user "admin" who is automatically the system maintainer.
Now I create a second admin "franz" and give him the admin rights. Now I use the ADMIN TOOLS > Settings > Manage System Maintainers and add "franz" there.
Now I go back into the backend.
Now I am perplexed.

  • #1504804727 RuntimeException

*This module "tools_ExtensionmanagerExtensionmanager" is only available as system maintainer *

see https://github.com/TYPO3-Documentation/TYPO3CMS-Exceptions/pull/16/files

TYPO3 should not have allowed to remove myself from the system maintainers. Or at least a warning should have been given. I just did not know that I must also add "admin" go the system maintainers at the moment when I add the user "franz" there.

Actions #1

Updated by Riccardo De Contardi 8 months ago

  • Status changed from New to Needs Feedback

Is this still preproducble on TYPO3 12? I tried without success... can you add a step-by-step guide on how to reproduce it?

Actions #2

Updated by Georg Ringer about 1 month ago

  • Status changed from Needs Feedback to Closed

Hey Franz,

I am closing this issue. this sound like the single edge case described in \TYPO3\CMS\Core\Authentication\BackendUserAuthentication::isSystemMaintainer. so if no system maintainers defined yet, any admin is allowed. so if you configure now one system maintainer, suddenly the admin doesn't have access to the system maintainer modules.

this is desired and won't change.

feel free to discuss on slack or via mail if you got further questions

Actions

Also available in: Atom PDF