[TYPO3-core] RFC #6877: TCEFORM TSconfig disabled fields still available in List View

[Martin Kutschker]

Benjamin Mack schrieb:
> Hey guys,
> 
> this is a SVN patch request.
> 
> Type: Bugfix
> 
> Branches: 4.2, (maybe 4.1 as well?)
> 
> BT: http://bugs.typo3.org/view.php?id=6877
> 
> Problem:
> Disabling fields via TCEFORM.tablename.fieldname.disabled = 1 will 
> disable the field showing up in the editing form, but the field will 
> still be available in the List module.
> 
> This enables the users to still view the values of those fields and even 
> export them to CSV.
> 
> Solution:
> The problem lies within the "getFieldlist" in the db_list.inc class. I 
> added the functionality to load the TCEFORM pagesTSconfig and made a 
> check if TCEFORM.table.field.disabled is set.

Well, probably this is what the admin intended. OTOH, TCEFORM settings 
should apply only to TCE forms. For the columns there is a mod.SHARED 
setting. So I'm not quite sure if this is the right way to do it.

Maybe a mod.list.hideFieldsDisabledInForms setting is a better approach. 
Or introduce a mod.SHARED.disabledFields.<table> = <field1>,..<fieldn>.

Masi