[TYPO3-core] RFC #17032: Backend search throws Exceptions / SQL errors when running as non-admin

Peter Beernink p.beernink at drecomm.nl
Fri Jan 14 15:35:33 CET 2011


Hi,

On 14-1-2011 15:09, Ernesto Baschny [cron IT] wrote:
> Problem:
> When a non-admin tries the BE live search, SQL errors are thrown (and
> you see them in the debug console if this is active). Only happens for
> non-admin users.
>
> Solution:
> Check if there are fields left to search (after runing through exclude
> fields etc) and don't run a query if there are no fields left to search in.
>
> How to test:
> Login as a non-admin. Search something.

+1 by reading and testing.

However, during testing I discovered an other issue.
It turns out that as a simple user with only one little page tree, I 
also receive records to which I should not have access, like backend 
users and groups.
I'll create a new issue for this.

Greets,
Peter


More information about the TYPO3-team-core mailing list