Important: #94951 - Restrict export functionality to allowed users

Description

The export functionality has the following security drawbacks:

• Export for editors is not limited on field level
• The Save to filename functionality saves to a shared folder, which other editors with different access rights may have access to.

Both issues are not easy to resolve and also the target audience for the Import/Export functionality are mainly TYPO3 admins.

Impact

The export functionality is restricted to TYPO3 admin users and to users, who explicitly have access through the new user TSConfig setting options.impexp.enableExportForNonAdminUser.

Affected installations

Installations with EXT:impexp installed where non-admin users need to use the export functionality.

Migration

If non-admin users should be able to use the export tool, set the following user TSconfig:

options.impexp.enableExportForNonAdminUser = 1