Project

General

Profile

Actions

Bug #99335

closed

Read only password can be overwritten

Added by Lina Wolf over 1 year ago. Updated about 1 year ago.

Status:
Closed
Priority:
Should have
Assignee:
-
Category:
FormEngine aka TCEforms
Target version:
-
Start date:
2022-12-11
Due date:
% Done:

100%

Estimated time:
TYPO3 Version:
12
PHP Version:
Tags:
Complexity:
Is Regression:
Sprint Focus:

Description

The newly introduced password generator field control (https://review.typo3.org/c/Packages/TYPO3.CMS/+/76002) allows
to set the property 'allowEdit' = false. However this only prevents Editors from changing the password on initial saving.

Once saved the editor can easily change the password to anything they wishes. Therefore they can circumvent the 'allowEdit' property by saving the record twice.

Setting the password field to read only is also no solution as then the Password Generator option cannot be used on readonly fields.

Expected behaviour: After setting a password and saving the record I can generate a new password by clicking the generate button once more. I can - however - not manually change the password.

Test case: EXT:styleguide tx_styleguide_elements_basic-> password_5


Files

EditngWhenNotAllowed.png (4.33 KB) EditngWhenNotAllowed.png Lina Wolf, 2022-12-11 08:01
Actions #1

Updated by Lina Wolf over 1 year ago

  • Subject changed from Read only password can be overridden to Read only password can be overwritten
Actions #2

Updated by Oliver Bartsch over 1 year ago

  • Related to Feature #98373: Reactions - Incoming WebHooks for TYPO3 added
Actions #3

Updated by Oliver Bartsch over 1 year ago

  • Related to deleted (Feature #98373: Reactions - Incoming WebHooks for TYPO3)
Actions #4

Updated by Gerrit Code Review over 1 year ago

  • Status changed from New to Under Review

Patch set 1 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions #5

Updated by Gerrit Code Review over 1 year ago

Patch set 2 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions #6

Updated by Gerrit Code Review over 1 year ago

Patch set 3 for branch main of project Packages/TYPO3.CMS has been pushed to the review server.
It is available at https://review.typo3.org/c/Packages/TYPO3.CMS/+/77023

Actions #7

Updated by Oliver Bartsch over 1 year ago

  • Status changed from Under Review to Resolved
  • % Done changed from 0 to 100
Actions #8

Updated by Benni Mack about 1 year ago

  • Status changed from Resolved to Closed
Actions

Also available in: Atom PDF