[TYPO3-dev] access control

[Rico Moorman]

Welcome back : )

I think in order to first make an attempt to implement it could be wise 
to do it on usergroup level ...
One thing I noticed in 3.8.1 was that for example the functions which 
render the records in the page module (for tt_address for example) just 
take the editcontent permission on pagelevel into account and then 
render the whole list with editicons or not.
 >> typo3/sysext/cms/layout/db_layout.php:881  in function 
renderListContent()
 >> typo3/sysext/cms/layout/class.tx_cms_layout.php:1168 in function 
makeOrdinaryList

the last one is where the editicons are being added in the page module 
so here one could maybe insert conditions ...but it would have to happen 
for the contextmenu too

further for the list view (>> typo3/class.db_list_extra.inc:790) there 
is a statement getting the permissions for this particular element

Do you see some other class where one could get grip on the permissions 
in a suitable way?

tapio wrote:
> Gregory Remington wrote:
> 
>> Rico Moorman wrote:
>>
>>> so no one wants to join a discussion about that topic here?
>>>
>>> not even you ... tapio? ;-)
>>
>>
>>
>> Tapio is on holiday and should be back in a few days.
> 
> 
> I'm now at home. IMO the core access control module should be extended.
> But meanwhile it might be possible to extend content element -level 
> access control just by adding some new conditions on hte base of
> some new fields to 'tt_content'. a loop could test, it the user/user 
> group would have access to the content element. A loop could change
> the value variable, which relates, if someone can access the content, 
> from 1 to 0, if some user/user group should not have access to the content.
> In order to avoid too complex solution, should the control be for user 
> or user group?