[BUGFIX] Revert PageReadPermission check for TreeController
In order to allow non-admins to fetch nodes which have no "pid=0" the change to only fetch pages with access, the change to check on a DB query basis is reverted. Additionally a functional tests is extended to cover the problematic case. Resolves: #91348 Related: #90880 Releases: master, 9.5 Change-Id: I3f737c92c8164c572f7e58335d92a82a4a5aa4dc Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/64431 Tested-by:Tymoteusz Motylewski <t.motylewski@gmail.com> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Tymoteusz Motylewski <t.motylewski@gmail.com> Reviewed-by:
Oliver Hader <oliver.hader@typo3.org> Reviewed-by:
Benni Mack <benni@typo3.org>
Showing
- typo3/sysext/backend/Classes/Controller/Page/TreeController.php 4 additions, 4 deletions...sysext/backend/Classes/Controller/Page/TreeController.php
- typo3/sysext/backend/Tests/Functional/Controller/Page/Fixtures/PagesWithBEPermissions.yaml 12 additions, 3 deletions...onal/Controller/Page/Fixtures/PagesWithBEPermissions.yaml
- typo3/sysext/backend/Tests/Functional/Controller/Page/TreeControllerTest.php 22 additions, 0 deletions...d/Tests/Functional/Controller/Page/TreeControllerTest.php
Please register or sign in to comment