[TYPO3-dev] Restrictions for CONTENT.table
Sebastian Gebhard
sebastiangebhard at hoch2.de
Wed Feb 24 08:24:39 CET 2010
Hi,
yesterday I once again stumbled over the limited tables that can be
accessed via CONTENT.
I tried to generate a language Menu from all languages in sys_language
which are not hidden, but sys_language is not among the allowed tables,
as that are only tx_*, tt_*, ttx_*, fe_*, user_* and static_* at the moment.
Googling brought following discussion to my attention:
http://lists.typo3.org/pipermail/typo3-dev/2007-May/023728.html
When Patrick asked for the reason for the restrictions, Dmitry answered
"You should not access be_* from frontend. This is a simple security thing."
IMHO the question why not only denying be_* table and allow all other
tables with TCA definition, is not fully answered yet.
What do you think? Should sys_* be allowed for CONTENT? Does it make
sense to invert the logic and only restrict be_* tables?
Kind regards,
Sebastian
More information about the TYPO3-dev
mailing list