« Previous | Next » 

Revision 3754d7a2

ID3754d7a224f30accda9de8287616bd6d0fa34cd4
Parent bd86ecc8
Child b716baa6

Added by Bastian Waidelich over 6 years ago

[BUGFIX] Allow explicit privileges for ``Everybody`` role

The ``TYPO3.Flow:Everybody`` role that is always active by design gets
an ``ABSTAIN`` permission for all defined ``PrivilegeTargets`` so that
permission to restricted privileges is not granted by default.

Due to a bug this ``ABSTAIN`` permission was also set when a privilege
was explicitly configured for the ``Everybody`` role as soon as the
same ``PrivilegeTarget`` was used for another role, effectively
overriding the permission.

This change allows for explicitly allowing or denying privileges to the
``Everybody`` role. It also adds some unit tests for the
``PolicyService``.

Change-Id: I9cfc01ade9ccbeb092e38e00bf4ee9f0afbc6b6c
Fixes: FLOW-308
Releases: master, 3.0

  • added
  • modified
  • copied
  • renamed
  • deleted