Project

General

Profile

Actions

Bug #99335

closed

Read only password can be overwritten

Added by Lina Wolf over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
FormEngine aka TCEforms
Target version:
-
Start date:
2022-12-11
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The newly introduced password generator field control (https://review.typo3.org/c/Packages/TYPO3.CMS/+/76002) allows
to set the property 'allowEdit' = false. However this only prevents Editors from changing the password on initial saving.

Once saved the editor can easily change the password to anything they wishes. Therefore they can circumvent the 'allowEdit' property by saving the record twice.

Setting the password field to read only is also no solution as then the Password Generator option cannot be used on readonly fields.

Expected behaviour: After setting a password and saving the record I can generate a new password by clicking the generate button once more. I can - however - not manually change the password.

Test case: EXT:styleguide tx_styleguide_elements_basic-> password_5


Files

EditngWhenNotAllowed.png (4.33 KB) EditngWhenNotAllowed.png Lina Wolf, 2022-12-11 08:01
Actions

Also available in: Atom PDF