Skip to content

Access deny exception on unrelated elements #82

Description

@koertho

The $dataContainer->getCurrentRecord(); in

$currentRecord = $dataContainer->getCurrentRecord();

may lead to an Access Denied exception for users without admin privileges. I think this is a Contao Core Issue, since it should not return the content element with the GET-ID here, but it does. Maybe it would be good to wrap the call in a try-catch.

See also my slack post: https://contao.slack.com/archives/CK4J0KNDB/p1784209625761179

EDIT: now I created a contao issue after I could reproduce this in the demo: contao/contao#10028

Metadata

Metadata

Assignees

Labels

No labels
No labels

Type

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions