[Flow] Abstract Classes and Policy

[Christian Loock]

Oh I'm sorry, I just checked. We actually updated from Version 2.0 to 2.1.
My bad. But still, before the update those errors did not happen.


2014-03-12 13:59 GMT+01:00 Christian Loock <brainshack at gmail.com>:

> I have a Widget Controller that inherits from TYPO3\Fluid\Core\Widget\
> AbstractWidgetController.
>
> The first excepttion is thrown, when it tries to call my Controller, since
> it is not in the policy. I am pretty sure that you didn't have to create
> ACLs for ViewHelper Controllers before the update to 2.2.
>
> When i add my Controller to the ACL, it will throw an exception because
> TYPO3\Fluid\Core\Widget\AbstractWidgetController::initializeAction is
> being called, since I do not overwrite it in my Controller. This is wha i
> have to add TYPO3\Fluid\Core\Widget\AbstractWidgetController to my ACL
> aswell in order for everything to run. But this doesn't feel right to me
> tbh. At least that was not the case in 2.1
>
>
> 2014-03-12 13:54 GMT+01:00 Adrian Föder <adrian at foeder.de>:
>
> Hi  Christian, I probably didn't fully understand your problem; where
>> exactly is your security exception triggered meanwhile? On What
>> controller/action?
>>
>> Thanks!
>>
>> Best,
>> Adrian
>>
>> Am 12.03.2014 11:13, schrieb Christian Loock:
>>
>>  Hi,
>>>
>>> we recently updated to Flow 2.2 and since then, we are getting security
>>> exceptions, that are triggerd because the Security Framework checks
>>> Classes
>>> you inherit from. Example:
>>>
>>> You write a Widget that has a controller that that extends from
>>> TYPO3\Fluid\Core\Widget\AbstractWidgetController
>>>
>>> In Flow 2.1 this caused no issues, since it seems like it didnt check for
>>> this kind of inheritance.
>>>
>>> Now I know I can fix this, by adding these Controllers to my Policy, but
>>> shouldnt it be at least part of Flows Policy.yaml ?
>>>
>>> Does it even make sense to check for ViewHelpers? Or is this behaviour
>>> intended?
>>>
>>>
>> _______________________________________________
>> Flow mailing list
>> Flow at lists.typo3.org
>> http://lists.typo3.org/cgi-bin/mailman/listinfo/flow
>>
>
>