Project

General

Profile

Feature #3677

wkhtmltopdf: FE User access prohibited, if client IP changes - $TYPO3_CONF_VARS[FE][lockIP]

Added by Carsten Rose about 3 years ago. Updated 6 months ago.

Status:
Some day maybe
Priority:
Normal
Assignee:
Target version:
Start date:
04.05.2017
Due date:
% Done:

0%

Estimated time:
Discuss:

Description

To forward FE_USER privileges to wkhtmltopdf, it's necessary to switch off the IP check for FE_USER ($TYPO3_CONF_VARS[FE][lockIP]). This lowers the security level - it would be good not to do that.

Extension for user specific `$TYPO3_CONF_VARS[FE][lockIP]` https://www.typo3.net/forum/thematik/zeige/thema/61123/
  • This might help to offfer `$TYPO3_CONF_VARS[FE][lockIP]` together with an IP whitelist (=localhost).
  • The idea is to develop a separate Extension or to integrate that feature in QFQ.
  • There are already different IP based checks for debugging functions or BE Logging access.
Some notes:

History

#1 Updated by Carsten Rose about 3 years ago

  • Description updated (diff)

#2 Updated by Carsten Rose about 3 years ago

  • Description updated (diff)

#3 Updated by Carsten Rose over 2 years ago

  • Target version set to next4

#4 Updated by Carsten Rose over 2 years ago

  • Tracker changed from Support to Feature

#5 Updated by Carsten Rose 6 months ago

  • Status changed from New to Some day maybe

Also available in: Atom PDF