Feature #80805 (forge.typo3.org)

[jpmschuler]

powermail mail list module: using a core link builder for attachments to add compatibility with "secure_downloads" The link is build in Resources/Private/Partials/Module/List.html:197 with \In2code\Powermail\ViewHelpers\Misc\GetFileWithPathViewHelper. If you're interested in doing a pull request, feel free. Otherwise I will close this issue or set it on hold.

[jpmschuler]

(reproducing #80805 as it is non-public now):

[jpmschuler]

Szenario:

• Have a folder "fileadmin/secured" with 403-forbidden configured in the web server.
• Have extension "secure_downloads" installed and configured to "fileadmin/secured". ** Extension allows access (probably via a hook?) to the files as it rewrites all links in backend and frontend so that files are piped through the extension and decides on runtime if the user has access (e.g. if a frontend link points to a secured file, or if the whole folder is accessible by backend rights).
• Have a powermail form which uploads attachments to this secured folder (or a subfolder)

Problem:

• Accessing the files from powermail mail list module doesn't work (results in 403), because the "normal" link (e.g. /fileadmin/secured/myfile.pdf) is used, instead of a special eid link (example in https://docs.typo3.org/typo3cms/extensions/secure_downloads/Introduction/About/Index.html).

Suggestion: As the TYPO3 file module itself works fine, I wonder if powermail perhaps uses string concatenation there instead of a TYPO3 core link builder for the mail list module, and if that is causing the incompatibility here. A quick look in secure_downloads comes up with a SignalSlot\Dispatcher architecture, with

'TYPO3\\CMS\\Core\\Resource\\ResourceStorage',
'\TYPO3\CMS\Core\Resource\ResourceStorage::SIGNAL_PreGeneratePublicUrl,

so on first glance it seems that if powermail would use a core/FAL function to create this link, it would solve this problem (and perhaps even improve situations with obscure ResourceStorages, like cloud services).

I'm sorry, but due to the complexity of powermail, I have no suggestion where to look/fix on that side.

[jpmschuler]

This should also allow for storing attachments in different storage types than folders... AWS cloud storage or something. However I currently cannot check for this and don't know if changing retrieval is enough (as there probably is a different function for saving the attachments). Just wanted to mention this for further reference if anybody stumbles upon this in a search.