[Typo3-dev] [Typo3] Freesite Extension
John Romano
typo3 at pb.net
Mon Dec 22 15:55:17 CET 2003
At first glance, the Freesite extension seems like a great thing.
However, if you're looking for a system that will create a Typo3 site
for a user that will allow that user to make ALL changes on their own,
Freesite isn't the answer.
The Template Constant Editor, which is where all the cosmetic changes
can be done to the templates, is only available to BE Administrators.
Individual BE users of each Freesite is stuck with the template they
chose and can't change even the most simple items, like fonts and
colors. Instead they have to contact the Admin.
I've found one broken "workaround" published: Change
/typo3/ext/tstemplate/ts/conf.php with $MCONF["access"]="user,group";,
but that doesn't give the BE user permission to modify the template
table -- And even if this did work, it would open up a huge security
hole relating to SQL statements.
So here's the question:
Are there any plans to make the constant editor safely/securely
available to non-Admin users so that they can make minor cosmetic
changes to a template without having the ability to trash the entire
Typo3 installation?
Thanks,
John Romano
More information about the TYPO3-dev
mailing list