Skip to content

Commit

Permalink
[BUGFIX] Check for access permissions to record in context menu
Browse files Browse the repository at this point in the history
When clicking the context menu of a record, only show the edit link if
the editor has all necessary access permissions to this record.

Resolves: #89279
Releases: master, 9.5, 8.7
Change-Id: I856197b377bdb869a3eb6b0989cd827b4554369a
Reviewed-on: https://review.typo3.org/c/Packages/TYPO3.CMS/+/61921
Tested-by: TYPO3com <noreply@typo3.com>
Tested-by: Sascha Rademacher <sascha.rademacher+typo3@gmail.com>
Tested-by: Daniel Goerz <daniel.goerz@posteo.de>
Reviewed-by: Sascha Rademacher <sascha.rademacher+typo3@gmail.com>
Reviewed-by: Felix P. <f.pachowsky@neusta.de>
Reviewed-by: Daniel Goerz <daniel.goerz@posteo.de>
  • Loading branch information
IndyIndyIndy authored and ervaude committed Oct 9, 2019
1 parent 0495898 commit 1a8583a
Showing 1 changed file with 2 additions and 1 deletion.
Expand Up @@ -491,7 +491,8 @@ protected function canBeEdited(): bool

$access = !$this->isRecordLocked()
&& $this->backendUser->check('tables_modify', $this->table)
&& $this->hasPagePermission(Permission::CONTENT_EDIT);
&& $this->hasPagePermission(Permission::CONTENT_EDIT)
&& $this->backendUser->recordEditAccessInternals($this->table, $this->record);
return $access;
}

Expand Down

0 comments on commit 1a8583a

Please sign in to comment.