[TYPO3-core] RFC: Fixing bug #4207 (and #4468) - User>Workspaces shows users pages they have no acces to

Martin Kutschker martin.kutschker-n0spam at no5pam-blackbox.net
Sun Feb 11 21:20:35 CET 2007


Hi!

This is a patch request.

Branches: trunk and TYPO3_40

Problem:

User>Workspaces shows all changes in a WS without checking if the user 
has access (show) to them.

Solution:

Check the access permissions.

Notes:

The permissions and the root line (used for display) are cached for 
speeding up listings with many changes.

Testing:

Create a user which has not access to the whole tree. Make changes in 
DRAFT within his branch and other parts. As this user go to DRAFT and 
see the list of changes User>Workspaces with and without the patch.

Masi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: index.permsCheck.diff
Type: text/x-diff
Size: 1317 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20070211/e3320150/attachment.bin 


More information about the TYPO3-team-core mailing list