[Typo3-dev] [Typo3] Freesite Extension

John Romano typo3 at pb.net
Mon Dec 22 15:55:17 CET 2003


At first glance, the Freesite extension seems like a great thing. 
However, if you're looking for a system that will create a Typo3 site 
for a user that will allow that user to make ALL changes on their own, 
Freesite isn't the answer.

The Template Constant Editor, which is where all the cosmetic changes 
can be done to the templates, is only available to BE Administrators. 
Individual BE users of each Freesite is stuck with the template they 
chose and can't change even the most simple items, like fonts and 
colors. Instead they have to contact the Admin.

I've found one broken "workaround" published: Change 
/typo3/ext/tstemplate/ts/conf.php with $MCONF["access"]="user,group";, 
but that doesn't give the BE user permission to modify the template 
table -- And even if this did work, it would open up a huge security 
hole relating to SQL statements.

So here's the question:
Are there any plans to make the constant editor safely/securely 
available to non-Admin users so that they can make minor cosmetic 
changes to a template without having the ability to trash the entire 
Typo3 installation?

Thanks,
John Romano





More information about the TYPO3-dev mailing list