[TYPO3-dev] Restrictions for CONTENT.table

[Sebastian Gebhard]

Thanks for your suggestions, I filed an issue:
http://bugs.typo3.org/view.php?id=13898

Hope I can provide a patch soon

Kind regards,
Sebastian

Am 24.02.10 08:24, schrieb Sebastian Gebhard:
> Hi,
>
> yesterday I once again stumbled over the limited tables that can be
> accessed via CONTENT.
>
> I tried to generate a language Menu from all languages in sys_language
> which are not hidden, but sys_language is not among the allowed tables,
> as that are only tx_*, tt_*, ttx_*, fe_*, user_* and static_* at the
> moment.
>
> Googling brought following discussion to my attention:
> http://lists.typo3.org/pipermail/typo3-dev/2007-May/023728.html
>
> When Patrick asked for the reason for the restrictions, Dmitry answered
> "You should not access be_* from frontend. This is a simple security
> thing."
>
> IMHO the question why not only denying be_* table and allow all other
> tables with TCA definition, is not fully answered yet.
>
> What do you think? Should sys_* be allowed for CONTENT? Does it make
> sense to invert the logic and only restrict be_* tables?
>
> Kind regards,
> Sebastian