[TASK] Reorganize & streamline sudo mode handling
Issue #92836 introduced the "sudo mode" to all admin tool modules, but with using the session storage of the install tool (based on PHP native `$_SESSION` handling) - which is different to the usual behavior and session handling in the TYPO3 backend. This change changes the session handling to backend user sessions, add a generic way to configure "sudo mode" per backend routes (not hardcoding its invocation in the admin tool controller anymore). In addition, "sudo mode" is now enabled for the extension manager module as well - this was not possible before, due to the hardwired implementation to `ext:install`. In developer context, "sudo mode" is granted automatically (#93160). Resolves: #94246 Releases: main Change-Id: I4fee2b7da3da25c8c6479eab7478b38cdc3b5a4d Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/78546 Reviewed-by:Benni Mack <benni@typo3.org> Tested-by:
Benni Mack <benni@typo3.org> Tested-by:
core-ci <typo3@b13.com> Tested-by:
Andreas Fernandez <a.fernandez@scripting-base.de> Reviewed-by:
Andreas Fernandez <a.fernandez@scripting-base.de>
Showing
- Build/Sources/TypeScript/backend/security/element/sudo-mode.ts 119 additions, 0 deletions.../Sources/TypeScript/backend/security/element/sudo-mode.ts
- Build/Sources/TypeScript/core/event/regular-event.ts 8 additions, 0 deletionsBuild/Sources/TypeScript/core/event/regular-event.ts
- Build/phpstan/phpstan-baseline.neon 0 additions, 10 deletionsBuild/phpstan/phpstan-baseline.neon
- typo3/sysext/backend/Classes/Controller/Security/SudoModeController.php 216 additions, 0 deletions...ackend/Classes/Controller/Security/SudoModeController.php
- typo3/sysext/backend/Classes/Http/RouteDispatcher.php 41 additions, 0 deletionstypo3/sysext/backend/Classes/Http/RouteDispatcher.php
- typo3/sysext/backend/Classes/Middleware/SudoModeInterceptor.php 85 additions, 0 deletions...sysext/backend/Classes/Middleware/SudoModeInterceptor.php
- typo3/sysext/backend/Classes/Module/BaseModule.php 8 additions, 0 deletionstypo3/sysext/backend/Classes/Module/BaseModule.php
- typo3/sysext/backend/Classes/Module/ExtbaseModule.php 19 additions, 13 deletionstypo3/sysext/backend/Classes/Module/ExtbaseModule.php
- typo3/sysext/backend/Classes/Module/Module.php 10 additions, 6 deletionstypo3/sysext/backend/Classes/Module/Module.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessClaim.php 47 additions, 0 deletions.../backend/Classes/Security/SudoMode/Access/AccessClaim.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessFactory.php 109 additions, 0 deletions...ackend/Classes/Security/SudoMode/Access/AccessFactory.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessGrant.php 41 additions, 0 deletions.../backend/Classes/Security/SudoMode/Access/AccessGrant.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessLifetime.php 48 additions, 0 deletions...ckend/Classes/Security/SudoMode/Access/AccessLifetime.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessStorage.php 139 additions, 0 deletions...ackend/Classes/Security/SudoMode/Access/AccessStorage.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/AccessSubjectInterface.php 51 additions, 0 deletions...asses/Security/SudoMode/Access/AccessSubjectInterface.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/RouteAccessSubject.php 96 additions, 0 deletions...d/Classes/Security/SudoMode/Access/RouteAccessSubject.php
- typo3/sysext/backend/Classes/Security/SudoMode/Access/ServerRequestInstruction.php 167 additions, 0 deletions...ses/Security/SudoMode/Access/ServerRequestInstruction.php
- typo3/sysext/backend/Classes/Security/SudoMode/Exception/RequestGrantedException.php 42 additions, 0 deletions...s/Security/SudoMode/Exception/RequestGrantedException.php
- typo3/sysext/backend/Classes/Security/SudoMode/Exception/VerificationRequiredException.php 42 additions, 0 deletions...rity/SudoMode/Exception/VerificationRequiredException.php
- typo3/sysext/backend/Classes/Security/SudoMode/PasswordVerification.php 124 additions, 0 deletions...ackend/Classes/Security/SudoMode/PasswordVerification.php
Please register or sign in to comment