[BUGFIX] Check "tables_modify" permissions in list module
If an editor has "view" permissions set for a table, but no "modify" permissions, the record list would still show many buttons related to modifying records, to the user: "Add", "Edit", "Copy", "Cut" actions. Trying to click one of these buttons would lead the editor to a broken page that just shows an infinite loading spinner. This patch now adds "tables_modify" permission checks to many places in the code. The following adjustments were made: - Check modify permissions on "copy" in RecordProvider (context menu) - Check table modify permissions in DatabaseRecordList Resolves: #83008 Resolves: #89307 Resolves: #23598 Releases: master, 9.5 Change-Id: Ia3140ba887573a314191ebba5672c85d93fe885c Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63696 Tested-by:TYPO3com <noreply@typo3.com> Tested-by:
Georg Ringer <georg.ringer@gmail.com> Tested-by:
Oliver Bartsch <bo@cedev.de> Tested-by:
Benni Mack <benni@typo3.org> Reviewed-by:
Georg Ringer <georg.ringer@gmail.com> Reviewed-by:
Benni Mack <benni@typo3.org>
Showing
- typo3/sysext/backend/Classes/ContextMenu/ItemProviders/RecordProvider.php 1 addition, 0 deletions...kend/Classes/ContextMenu/ItemProviders/RecordProvider.php
- typo3/sysext/recordlist/Classes/RecordList/DatabaseRecordList.php 10 additions, 6 deletions...sext/recordlist/Classes/RecordList/DatabaseRecordList.php
Please register or sign in to comment