contao/test — Issue #2747: Pop-up File Manager overwrites fileTree [eval][path]
Author: importer
Created: 2011-11-29 10:14:12+00:00
State: open
Labels: backend, Defect, Invalid

This is a developer issue and therefore, cannot be replicated in the online demo.

**Problem**
1. I've added a "inputType" = "fileTree" to have a restricted folder, e.g. ['eval']['path'] = 'tl_files/myfolder'
2. Implemented like above, it correctly restricts the root folder of the selection to prevent selecting files outside of this folder
3. When clicking on the pop-up file manager, all files and folders are visible (perhaps also not a problem), however, when closing the pop-up file manager, it overwrites the control with a complete filetree path, instead of honouring the setting in (1) above
4. You are then allowed to select and save a file OUTSIDE of the restricted path (and believe me, clients then do this)
5. Upon save, the selected file is then outside the restricted path of the control and generates a "is not mounted" error

**Solution**
The pop-up fileManager's ajax update routine MUST honour and check the eval path and ensure it only updates from that root point upwards.

[Download the attachments](http://www.contao.org/tl_files/tickets/2747.zip "Download the attachments of this ticket")

--- _Originally created by thyon on December 20th, 2010, at 11:15am (ID 2747)_