[BUGFIX] Temporarily disable group access check

To support editors, the page module checks
whether configured shortcut targets exist
and if they are accessible in the frontend
(e.g. not hidden). Otherwise, a info box is
displayed on the page, defining the shortcut.

However, in case a target page has group
restrictions defined (`pages.fe_group`), it
was previously declared as non accessible,
since no frontend group context exists in
backend.

This is now fixed by disabling the group
access, while searching for target pages.

Resolves: #96184
Releases: main, 11.5
Change-Id: I173dfc4b6c5877a3a3ab458e890530fc167712aa
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/72421


Tested-by: core-ci <typo3@b13.com>
Tested-by: Oliver Bartsch <bo@cedev.de>
Reviewed-by: Oliver Bartsch <bo@cedev.de>

typo3/sysext/backend/Classes/Controller/PageLayoutController.php

@@ -398,6 +398,12 @@ class PageLayoutController
             $state = InfoboxViewHelper::STATE_ERROR;
 
             if ($shortcutMode || $this->pageinfo['shortcut']) {
+                // Store the current group access clause and unset it afterwards since it should
+                // not be used while searching for configured shortcut pages. Actually ->getPage()
+                // would allow to disable it via an argument. However, getMenu() currently does not.
+                // @todo Refactor as soon as ->getMenu() allows to dynamically disable group access check
+                $tempGroupAccess = $this->pageRepository->where_groupAccess;
+                $this->pageRepository->where_groupAccess = '';
                 switch ($shortcutMode) {
                     case PageRepository::SHORTCUT_MODE_NONE:
                         $targetPage = $this->getTargetPageIfVisible($this->pageRepository->getPage($this->pageinfo['shortcut']));
@@ -422,6 +428,7 @@ class PageLayoutController
                         $state = InfoboxViewHelper::STATE_INFO;
                         break;
                 }
+                $this->pageRepository->where_groupAccess = $tempGroupAccess;
                 $message = htmlspecialchars($message);
                 if ($targetPage !== [] && $shortcutMode !== PageRepository::SHORTCUT_MODE_RANDOM_SUBPAGE) {
                     $linkToPid = $this->uriBuilder->buildUriFromRoute($this->moduleName, ['id' => $targetPage['uid']]);