Bug #94558
closed
Backend user image fails to load when in non public fal storage and user has no access
0%
Description
If the user image of a backend user is in a non public storage and the user has no access to the folder where the image is stored it doesn’t get loaded because of a 403 error. With TYPO3 8 this worked without problems. I don’t want the images in a public storage and I also don’t want to give every backend user a filemount for these images, so this was a good deal, but since TYPO3 9 it doesn’t work anymore. I did not test it but I think this is also in TYPO3 10 and 11.
Updated by Andreas Kienast about 2 years ago
- Status changed from New to Closed
This works as expected. Strictly speaking, the behavior of version 8 is a security issue, thus it's a good thing this doesn't work anymore.
Updated by Bernhard Eckl almost 2 years ago
To summarize this: If I insert an image in the frontend from a non public storage, the image gets loaded. If I have an image in the backend from a non public storage, the image loading fails.
This behaviour does not seem to make sense. I I’m wrong, how could this be explained?