[TYPO3-core] RFC: Fixing bug #4207 (and #4468) - User>Workspaces shows users pages they have no acces to
Martin Kutschker
martin.kutschker-n0spam at no5pam-blackbox.net
Sun Feb 11 21:20:35 CET 2007
Hi!
This is a patch request.
Branches: trunk and TYPO3_40
Problem:
User>Workspaces shows all changes in a WS without checking if the user
has access (show) to them.
Solution:
Check the access permissions.
Notes:
The permissions and the root line (used for display) are cached for
speeding up listings with many changes.
Testing:
Create a user which has not access to the whole tree. Make changes in
DRAFT within his branch and other parts. As this user go to DRAFT and
see the list of changes User>Workspaces with and without the patch.
Masi
-------------- next part --------------
A non-text attachment was scrubbed...
Name: index.permsCheck.diff
Type: text/x-diff
Size: 1317 bytes
Desc: not available
Url : http://lists.netfielders.de/pipermail/typo3-team-core/attachments/20070211/e3320150/attachment.bin
More information about the TYPO3-team-core
mailing list