[TYPO3-core] RFC: Fixing bug #4207 (and #4468) - User>Workspaces shows users pages they have no acces to

Ingmar Schlecht ingmar at typo3.org
Fri Feb 16 13:37:37 CET 2007


+1 based on testing and reading the patch.

This is quite an important one!

cheers
Ingmar

Martin Kutschker schrieb:
> Hi!
> 
> This is a patch request.
> 
> Branches: trunk and TYPO3_40
> 
> Problem:
> 
> User>Workspaces shows all changes in a WS without checking if the user
> has access (show) to them.
> 
> Solution:
> 
> Check the access permissions.
> 
> Notes:
> 
> The permissions and the root line (used for display) are cached for
> speeding up listings with many changes.
> 
> Testing:
> 
> Create a user which has not access to the whole tree. Make changes in
> DRAFT within his branch and other parts. As this user go to DRAFT and
> see the list of changes User>Workspaces with and without the patch.
> 
> Masi


More information about the TYPO3-team-core mailing list