FilePermissionsAspect::respectFileMounts(...) not working, users can see all files of storage(s)

fabarea / media

Media management system for TYPO3 CMS

Other

30 stars 25 forks source link

FilePermissionsAspect::respectFileMounts(...) not working, users can see all files of storage(s) #5

Closed hnadler closed 9 years ago

hnadler commented 9 years ago

In current master (vidi and media) - at least with PHP 5.4 - users filemounts are not respected. If a user has a filemount he can see the whole storage. Constraints are passed by signalSlot to

protected function respectFileMounts(Query $query, $constraints) ...

and in the end happens this:

$constraints = $query->logicalAnd(
    $constraints,
    $constraintsRespectingFileMounts
);

This wont work, at least in PHP 5.4. The $constraints variable is not modified in any way.

fabarea commented 9 years ago

Ok, let make a return of $statement in this case. Before I further proceed, could you check out branch "development" of media + vidi and let me know.