[TYPO3-dev] Checking for access restrictions on page

Christian Lerrahn typo3 at penpal4u.net
Fri Aug 15 14:00:34 CEST 2008


On Thu, 14 Aug 2008 22:38:14 +0000 (UTC)
bernd wilke <xoonsji02 at sneakemail.com> wrote:

> on Thu, 14 Aug 2008 18:30:09 +0200, Christian Lerrahn wrote:
> 
> > Maybe I didn't explain the scenario well enough then. What I do is
> > read page records and output links to these pages. Pages which have
> > a local access restriction will not appear. However, if the
> > restriction is inherited, the page will be listed and linked and
> > when I click on the link, I'll get a login form.
> > What I don't like is the unnecessary information disclosure this
> > results in. Let alone that I could compile a list of mainly useless
> > link for someone who doesn't have a login at all.
> 
> do you build the links by your own, or by TYPO3-function?
> 
> I think TYPO3 would build the correct link:
> if the page is actual (=with current login) visible, the link is
> generated if the page is invisible, the link is no link but a pure
> text
> 
> you may use this behaviour to decide the visibility at all.


Unfortunately links are created for pages that have only inherited the
restriction while TYPO3 will not link to the pages which have the
access restrictions set on themselves. This is all with API functions.

Cheers,
Christian




More information about the TYPO3-dev mailing list