« Previous | Next » 

Revision 0872cf75

ID0872cf75a0242c1921d4824c80f77dc783b60efd
Parent e0580d7f
Child c7dace40

Added by Bastian Waidelich over 6 years ago

[BUGFIX] Allow explicit privileges for ``Everybody`` role

The ``TYPO3.Flow:Everybody`` role that is always active by design gets
an ``ABSTAIN`` permission for all defined ``PrivilegeTargets`` so that
permission to restricted privileges is not granted by default.

Due to a bug this ``ABSTAIN`` permission was also set when a privilege
was explicitly configured for the ``Everybody`` role as soon as the
same ``PrivilegeTarget`` was used for another role, effectively
overriding the permission.

This change allows for explicitly allowing or denying privileges to the
``Everybody`` role. It also adds some unit tests for the
``PolicyService``.

Change-Id: I9cfc01ade9ccbeb092e38e00bf4ee9f0afbc6b6c
Fixes: FLOW-308
Releases: master, 3.0

  • added
  • modified
  • copied
  • renamed
  • deleted