[TYPO3-core] RFC: Bug 5704: IRRE - Children on the table pages get the pid of the parent page in pagetree

[Franz Holzinger]

Hello Oliver, 

> the pid for the new page is not an integer. Thus, the access to this new
> page cannot be checked withing TCEforms_inline and is just passed.
> If the new page could not been created because of missing access rights,
>  saving the new child records will also fail in TCEmain. Thus, the check
> is delegated to TCEmain automatically.
> This is a bugfix concerning IRRE: If nobody objects within one week,
> I'll commit this change to SVN.

I think in the case where a new page is created with IRRE, then it should be 
checked here if the current backend user has rights to edit the parent page 
record. 

if (t3lib_div::testInt($this->inlineFirstPid)) {
Add here a check to the pid field of the current record. 

$calcPRec = t3lib_BEfunc::getRecord('pages', $this->inlineFirstPid); 

Check the parent record. And if he has no permissions for the parent record 
then nothing shall continue from here. 

 - Franz