[TYPO3-core] RFC: Fixing bug #4207 (and #4468) - User>Workspaces shows users pages they have no acces to

[Michael Stucki]

+1 after testing and reading!

Michael

Martin Kutschker wrote:

> Hi!
> 
> This is a patch request.
> 
> Branches: trunk and TYPO3_40
> 
> Problem:
> 
> User>Workspaces shows all changes in a WS without checking if the user
> has access (show) to them.
> 
> Solution:
> 
> Check the access permissions.
> 
> Notes:
> 
> The permissions and the root line (used for display) are cached for
> speeding up listings with many changes.
> 
> Testing:
> 
> Create a user which has not access to the whole tree. Make changes in
> DRAFT within his branch and other parts. As this user go to DRAFT and
> see the list of changes User>Workspaces with and without the patch.
> 
> Masi

-- 
Use a newsreader! Check out
http://typo3.org/community/mailing-lists/use-a-news-reader/