silverstripe-framework/admin/code
Ingo Schommer fb784af738 API Enforce $allowed_actions in RequestHandler->checkAccessAction()
See discussion at https://groups.google.com/forum/?fromgroups#!topic/silverstripe-dev/Dodomh9QZjk

Fixes an access issue where all public methods on FormField were allowed,
and not checked for $allowed_actions. Before this patch you could e.g.
call FormField->Value() on the first field by using action_Value.

Removes the following assertion because it only worked due to RequestHandlingTest_AllowedControllerExtension
*not* having $allowed_extensions declared: "Actions on magic methods are only accessible if explicitly allowed on the controller."
2013-06-24 14:50:40 +02:00
..
AdminRootController.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
CMSBatchAction.php BUGFIX: Removed regression introduced in 9741d1. With the former in place, CMS authors can no longer perform batch publish actions 2013-05-30 16:05:56 +12:00
CMSBatchActionHandler.php API Marked statics private, use Config API instead (#8317) 2013-03-24 17:20:53 +01:00
CMSForm.php API New CMSForm class to allow validation responses in CMS (fixes #1777) 2013-06-13 07:51:05 +02:00
CMSMenu.php CMSMenu sort order (fixes #1716) 2013-04-09 12:19:33 +02:00
CMSMenuItem.php Clean up trailing ?> per coding standard 2012-02-12 12:40:16 -08:00
CMSPreviewable.php Method visibility according to coding conventions 2012-09-20 10:46:59 +02:00
CMSProfileController.php API Enforce $allowed_actions in RequestHandler->checkAccessAction() 2013-06-24 14:50:40 +02:00
GroupImportForm.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
LeftAndMain.php Updated helplink to 3.1 2013-06-22 18:08:25 +02:00
LeftAndMainExtension.php Update @package, @subpackage labels 2013-05-21 22:24:41 +12:00
MemberImportForm.php FIX Remove instances of lines longer than 120c 2012-09-30 17:18:13 +13:00
ModelAdmin.php API New CMSForm class to allow validation responses in CMS (fixes #1777) 2013-06-13 07:51:05 +02:00
SecurityAdmin.php API New CMSForm class to allow validation responses in CMS (fixes #1777) 2013-06-13 07:51:05 +02:00