Bug #99335: Read only password can be overwritten - TYPO3 Core - TYPO3 Forge

Actions

Copy link

Bug #99335

closed

Read only password can be overwritten

Added by Lina Wolf almost 2 years ago. Updated almost 2 years ago.

Status:

Closed

Priority:

Should have

Assignee:

Category:

FormEngine aka TCEforms

Target version:

Start date:

2022-12-11

Due date:

% Done:

100%

Estimated time:

TYPO3 Version:

PHP Version:

Tags:

Complexity:

Is Regression:

Sprint Focus:

Description

The newly introduced password generator field control (https://review.typo3.org/c/Packages/TYPO3.CMS/+/76002) allows
to set the property 'allowEdit' = false. However this only prevents Editors from changing the password on initial saving.

Once saved the editor can easily change the password to anything they wishes. Therefore they can circumvent the 'allowEdit' property by saving the record twice.

Setting the password field to read only is also no solution as then the Password Generator option cannot be used on readonly fields.

Expected behaviour: After setting a password and saving the record I can generate a new password by clicking the generate button once more. I can - however - not manually change the password.

Test case: EXT:styleguide tx_styleguide_elements_basic-> password_5

Files

EditngWhenNotAllowed.png (4.33 KB) EditngWhenNotAllowed.png

Lina Wolf, 2022-12-11 08:01

Actions

Copy link

Updated by Lina Wolf almost 2 years ago

Subject changed from Read only password can be overridden to Read only password can be overwritten

Actions

Copy link

Updated by Oliver Bartsch almost 2 years ago

Related to Feature #98373: Reactions - Incoming WebHooks for TYPO3 added

Actions

Copy link

Updated by Oliver Bartsch almost 2 years ago

Related to deleted (Feature #98373: Reactions - Incoming WebHooks for TYPO3)

Actions

Copy link

Updated by Gerrit Code Review almost 2 years ago

Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions

Copy link

Updated by Gerrit Code Review almost 2 years ago

Patch set 2 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions

Copy link

Updated by Gerrit Code Review almost 2 years ago

Patch set 3 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions

Copy link