Project

General

Profile

Feature #3677

wkhtmltopdf: FE User access prohibited, if client IP changes - $TYPO3_CONF_VARS[FE][lockIP]

Added by Carsten Rose over 3 years ago. Updated 12 months ago.

Status:
Some day maybe
Priority:
Normal
Assignee:
Target version:
Start date:
04.05.2017
Due date:
% Done:

0%

Estimated time:
Discuss:

Description

To forward FE_USER privileges to wkhtmltopdf, it's necessary to switch off the IP check for FE_USER ($TYPO3_CONF_VARS[FE][lockIP]). This lowers the security level - it would be good not to do that.

Extension for user specific `$TYPO3_CONF_VARS[FE][lockIP]` https://www.typo3.net/forum/thematik/zeige/thema/61123/
  • This might help to offfer `$TYPO3_CONF_VARS[FE][lockIP]` together with an IP whitelist (=localhost).
  • The idea is to develop a separate Extension or to integrate that feature in QFQ.
  • There are already different IP based checks for debugging functions or BE Logging access.
Some notes:
#1

Updated by Carsten Rose over 3 years ago

  • Description updated (diff)
#2

Updated by Carsten Rose over 3 years ago

  • Description updated (diff)
#3

Updated by Carsten Rose about 3 years ago

  • Target version set to next4
#4

Updated by Carsten Rose about 3 years ago

  • Tracker changed from Support to Feature
#5

Updated by Carsten Rose 12 months ago

  • Status changed from New to Some day maybe

Also available in: Atom PDF