[Flow] Content Restriction for Accounts
Christian EÃl
essl at incert.at
Wed Aug 28 11:05:45 CEST 2013
Hi,
I created a CRUD-Controller for Accounts. Now I want to restrict the access to these accounts for normal editors. Normal Editors should only be able to see and edit their own accounts. So I created the following content restriction:
-----------------------------------------------------------------------------------------------
resources:
entities:
TYPO3\Flow\Security\Account:
TYPO3_Flow_Account_Admin: 'ANY'
TYPO3_Flow_Account_Me: 'current.securityContext.account == this'
roles:
SimpleUser: []
Editor: [SimpleUser]
Administrator: [Editor]
acls:
Editor:
entities:
TYPO3_Flow_Account_Me: GRANT
Administrator:
entities:
TYPO3_Flow_Account_Admin: GRANT
-----------------------------------------------------------------------------------------------
When I now log in as Administrator, the list shows me all accounts as usual. But when I log in as Editor I get none at all. Not even the account of the Editor.
Did I miss something here?
More information about the Flow
mailing list