Skip to content
Snippets Groups Projects
Commit 72bcf63c authored by Christian Eßl's avatar Christian Eßl Committed by Benni Mack
Browse files

[BUGFIX] Check "tables_modify" permissions in list module

If an editor has "view" permissions set for a table, but no "modify"
permissions, the record list would still show many buttons related to
modifying records, to the user: "Add", "Edit", "Copy", "Cut" actions.
Trying to click one of these buttons would lead the editor to a broken
page that just shows an infinite loading spinner.

This patch now adds "tables_modify" permission checks to many places in
the code. The following adjustments were made:

- Check modify permissions on "copy" in RecordProvider (context menu)
- Check table modify permissions in DatabaseRecordList

Resolves: #83008
Resolves: #89307
Resolves: #23598
Releases: master, 9.5
Change-Id: Ia3140ba887573a314191ebba5672c85d93fe885c
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/63696


Tested-by: default avatarTYPO3com <noreply@typo3.com>
Tested-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
Tested-by: default avatarOliver Bartsch <bo@cedev.de>
Tested-by: default avatarBenni Mack <benni@typo3.org>
Reviewed-by: default avatarGeorg Ringer <georg.ringer@gmail.com>
Reviewed-by: default avatarBenni Mack <benni@typo3.org>
parent 52a85d54
Branches
Tags
0% or .
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment