From 9494038e1fa4cea47954976da5584961923f1e78 Mon Sep 17 00:00:00 2001
From: ajahn <jahn.typo3@googlemail.com>
Date: Thu, 18 Feb 2016 12:10:29 +0100
Subject: [PATCH] [BUGFIX] Drag&Drop sorting respects AuthMode
If an editor is not allowed to edit content elements with a specific
CType (e.g. HTML), drag&drop sorting was still active. Sorting seemed to
work without an error but was blocked in DataHandler due to missing
permissions.
This fix introduces the missing check to deactivate sorting in this case.
Change-Id: Ib40b1e2a2fbbd4694fbb69ed7cda4a2180e15f14
Resolves: #73539
Releases: master, 7.6
Reviewed-on: https://review.typo3.org/46752
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Gianluigi Martino <gmartino27@gmail.com>
Reviewed-by: Georg Ringer <georg.ringer@gmail.com>
Tested-by: Georg Ringer <georg.ringer@gmail.com>
---
typo3/sysext/backend/Classes/View/PageLayoutView.php | 1 +
1 file changed, 1 insertion(+)
diff --git a/typo3/sysext/backend/Classes/View/PageLayoutView.php b/typo3/sysext/backend/Classes/View/PageLayoutView.php
index 9d7ea345bc26..c2e21714a5b2 100644
--- a/typo3/sysext/backend/Classes/View/PageLayoutView.php
+++ b/typo3/sysext/backend/Classes/View/PageLayoutView.php
@@ -1509,6 +1509,7 @@ class PageLayoutView extends \TYPO3\CMS\Recordlist\RecordList\AbstractDatabaseRe
if ($this->getBackendUser()->user['admin']
|| ((int)$row['editlock'] === 0 && (int)$this->pageinfo['editlock'] === 0)
&& $this->getBackendUser()->doesUserHaveAccess($this->pageinfo, Permission::CONTENT_EDIT)
+ && $this->getBackendUser()->checkAuthMode('tt_content', 'CType', $row['CType'], $GLOBALS['TYPO3_CONF_VARS']['BE']['explicitADmode'])
) {
return true;
}
--
GitLab