[TYPO3-core] RFC: #15958: Bug: sections in flexforms require user to have access to default language

[Andreas Kiessling]

Hi,

This is a SVN patch request.

Type: Bugfix

BT reference: http://bugs.typo3.org/view.php?id=15958

Branches: 4_4, trunk

This problem may be best seen in action with templavoila (but is not 
limited to it) and is caused by the core handling of sections in flexforms.

When a section is defined in a flexform, the function 
getSingleField_typeFlex_draw in class t3lib_TCEforms checks if the user 
has access to the default language. This check is even done, when the 
record is totally unrelated to the default language, e.g. when you have 
a localized copy of an fce or a flexform in a simple extension record.

A user without access to the default language can not create a new entry 
in the section, but only edit the already existing, that e.g. get 
created when the record was copied for translation.

Solution: check if the user can edit the language of the current record.
Probably, the check can even be totally omitted, because general access 
restriction should already be checked and applied by tcemain.


Regards,
Andreas
-------------- next part --------------
An embedded and charset-unspecified text was scrubbed...
Name: 15958_v1.patch
URL: <http://lists.typo3.org/pipermail/typo3-team-core/attachments/20101011/88f342a7/attachment.txt>