[FEATURE] Only allow access to install tool for system maintainers 30/53830/11
authorBenni Mack <benni@typo3.org>
Tue, 29 Aug 2017 21:09:27 +0000 (23:09 +0200)
committerChristian Kuhn <lolli@schwarzbu.ch>
Thu, 31 Aug 2017 20:52:09 +0000 (22:52 +0200)
commit1171611992b14b09b3ddb4464ffe230fa0721ecf
tree6e6e4763d22f02f33161ffe030937fb3ac6088eb
parent8b4cb2ea67d267026cdacb721fa78bbdb62c3704
[FEATURE] Only allow access to install tool for system maintainers

A new option $GLOBALS['TYPO3_CONF_VARS']['SYS']['systemMaintainers']
is introduced, which contains a list of Backend User uids. It is
then possible to restrict access to backend modules to system
maintainers - most importantly the four Install Tool modules.

When this option is not set in LocalConfiguration.php, then all
admins are system maintainers, same goes for accessing TYPO3
in Development context.

This is the first step to remove the necessary "enter your
intall tool password" when accessing the install tool from
within TYPO3 Backend.

Resolves: #82266
Releases: master
Change-Id: If0026748ede694394b4e7f39788a650816160146
Reviewed-on: https://review.typo3.org/53830
Reviewed-by: Christian Kuhn <lolli@schwarzbu.ch>
Tested-by: Christian Kuhn <lolli@schwarzbu.ch>
Reviewed-by: Susanne Moog <susanne.moog@typo3.org>
Tested-by: Susanne Moog <susanne.moog@typo3.org>
Tested-by: TYPO3com <no-reply@typo3.com>
typo3/sysext/backend/Classes/Module/ModuleLoader.php
typo3/sysext/core/Classes/Authentication/BackendUserAuthentication.php
typo3/sysext/core/Configuration/DefaultConfiguration.php
typo3/sysext/core/Configuration/DefaultConfigurationDescription.php
typo3/sysext/core/Documentation/Changelog/master/Feature-82266-BackendUsersSystemMaintainers.rst [new file with mode: 0644]
typo3/sysext/install/ext_tables.php