[TYPO3-dev] Restrictions for CONTENT.table

Sebastian Gebhard sebastiangebhard at hoch2.de
Wed Feb 24 08:24:39 CET 2010


Hi,

yesterday I once again stumbled over the limited tables that can be 
accessed via CONTENT.

I tried to generate a language Menu from all languages in sys_language 
which are not hidden, but sys_language is not among the allowed tables, 
as that are only tx_*, tt_*, ttx_*, fe_*, user_* and static_* at the moment.

Googling brought following discussion to my attention: 
http://lists.typo3.org/pipermail/typo3-dev/2007-May/023728.html

When Patrick asked for the reason for the restrictions, Dmitry answered 
"You should not access be_* from frontend. This is a simple security thing."

IMHO the question why not only denying be_* table and allow all other 
tables with TCA definition, is not fully answered yet.

What do you think? Should sys_* be allowed for CONTENT? Does it make 
sense to invert the logic and only restrict be_* tables?

Kind regards,
Sebastian




More information about the TYPO3-dev mailing list