[BUGFIX] Backend groups: exclude config fields 66/17766/2
authorFelix Kopp <felix-source@phorax.com>
Mon, 28 Jan 2013 15:21:52 +0000 (16:21 +0100)
committerChristian Kuhn <lolli@schwarzbu.ch>
Mon, 28 Jan 2013 17:50:46 +0000 (18:50 +0100)
Adds missing option to restrict access to the fields:

* content_from_pid (Show content from different page)
* alias (Url alias)

within backend user group configuration.

Without these exclude fields backend user right can not
be stripped to the minimum: edit page title only.

Fixes: #40866
Releases: 6.0, 6.1
Change-Id: I1d5a1f08ea72cbeb11ade0302ebb0ecb7a5bfe2a
Reviewed-on: https://review.typo3.org/17766
Reviewed-by: Christian Kuhn
Tested-by: Christian Kuhn
t3lib/stddb/tbl_pages.php

index 6d40bf6..e1bd3fd 100644 (file)
@@ -322,6 +322,7 @@ $TCA['pages'] = array(
                        )
                ),
                'alias' => array(
+                       'exclude' => 1,
                        'displayCond' => 'VERSION:IS:false',
                        'label' => 'LLL:EXT:cms/locallang_tca.xml:pages.alias',
                        'config' => array(
@@ -525,6 +526,7 @@ $TCA['pages'] = array(
                        )
                ),
                'content_from_pid' => array(
+                       'exclude' => 1,
                        'label' => 'LLL:EXT:cms/locallang_tca.xml:pages.content_from_pid',
                        'config' => array(
                                'type' => 'group',