[!!!][TASK] Remove global option "lockBeUserToDBmounts"
The global configuration option, which is always active by default, restricts ALL non-administrators to be locked in to their webroots (DB mounts). Disabling this option would allow any editor to see the whole page tree, overriding most of the concepts used in TYPO3 Backend and permission handling. As stated in the description of the option, it is highly recommended for security reasons to leave this option enabled. This option is removed to streamline TYPO3's permission handling. Resolves: #92940 Releases: master Change-Id: I15f6538bdb34077a99cb8d2db7a21e60492bb923 Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/66908 Tested-by:Georg Ringer <georg.ringer@gmail.com> Tested-by:
TYPO3com <noreply@typo3.com> Tested-by:
Christian Kuhn <lolli@schwarzbu.ch> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Christian Kuhn <lolli@schwarzbu.ch>
Showing
- typo3/sysext/core/Classes/Authentication/BackendUserAuthentication.php 2 additions, 3 deletions...core/Classes/Authentication/BackendUserAuthentication.php
- typo3/sysext/core/Classes/Database/QueryGenerator.php 2 additions, 2 deletionstypo3/sysext/core/Classes/Database/QueryGenerator.php
- typo3/sysext/core/Classes/Database/QueryView.php 1 addition, 1 deletiontypo3/sysext/core/Classes/Database/QueryView.php
- typo3/sysext/core/Configuration/DefaultConfiguration.php 0 additions, 1 deletiontypo3/sysext/core/Configuration/DefaultConfiguration.php
- typo3/sysext/core/Configuration/DefaultConfigurationDescription.yaml 0 additions, 3 deletions...t/core/Configuration/DefaultConfigurationDescription.yaml
- typo3/sysext/core/Documentation/Changelog/master/Breaking-92940-GlobalOptionLockBeUserToDBmountsRemoved.rst 48 additions, 0 deletions...reaking-92940-GlobalOptionLockBeUserToDBmountsRemoved.rst
- typo3/sysext/core/Tests/Functional/Authentication/BackendUserAuthenticationTest.php 0 additions, 1 deletion...nctional/Authentication/BackendUserAuthenticationTest.php
- typo3/sysext/install/Classes/Service/SilentConfigurationUpgradeService.php 2 additions, 0 deletions...all/Classes/Service/SilentConfigurationUpgradeService.php
- typo3/sysext/install/Configuration/ExtensionScanner/Php/ArrayDimensionMatcher.php 5 additions, 0 deletions...figuration/ExtensionScanner/Php/ArrayDimensionMatcher.php
- typo3/sysext/lowlevel/Classes/Database/QueryGenerator.php 3 additions, 3 deletionstypo3/sysext/lowlevel/Classes/Database/QueryGenerator.php
Please register or sign in to comment