On Jul 12, 2007, at 4:14 AM, Robert Gravina wrote:
On Jun 29, 2007, at 7:23 PM, Robert Gravina wrote:
On Jun 29, 2007, at 2:05 PM, Rob Miller wrote:
http://plone.org/documentation/how-to/debug-unauthorized
at the very least it'll provide with some tools you can use to
get more info.
If I find out anything useful/solve it, I'll let you know - and if
not, I'll probably be wanting to get a hold of those tools :)
Sorry about the delay here... anyway, I've turned on verbose
security, and been able to get this helpful exception:
Your user account does not have the required permission. Access to
'portal_memberdata' of (PloneSite at /radio2ser), acquired through
(Show at /radio2ser/programs/shows/copy_of_allfunkedup), denied.
Your user account, testmember, exists at /radio2ser/acl_users.
Access requires one of the following roles: ['Manager', 'Owner'].
Your roles in this context are ['Authenticated', 'Member'].
(I've included the tail end of the traceback below)
OK... the thing is, this user account is the owner of that object
(originally created by a Manager user, then ownership given to this
user view the ownership tab).
Any ideas what could be going on here?
well, the traceback seems to be indicating that it's the
portal_memberdata object itself that is inaccessible, only available
to Manager and Owner roles. this would definitely be a problem,
because all of the member objects are stored in the
portal_memberdata... this needs to be generally accessible.
is there a workflow state on the portal_memberdata tool? maybe this
needs to be adjusted, or the permissions need to be tweaked in some
other way...
-r
thanks,
Robert
# URL: file:Archetypes/skins/archetypes/widgets/zid.pt
Line 22, Column 6
Expression: <PythonExpr member.getProperty('visible_ids',
here.portal_memberdata.getProperty('visible_ids'))>
Names:
{'container': <PloneSite at /radio2ser>,
'context': <Show at /radio2ser/programs/shows/copy_of_allfunkedup>,
'default': <Products.PageTemplates.TALES.Default instance at
0x25803c8>,
'here': <Show at /radio2ser/programs/shows/copy_of_allfunkedup>,
'loop': <Products.PageTemplates.TALES.SafeMapping object at
0xa93dbc0>,
'modules':
<Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance
at 0x2572918>,
'nothing': None,
'options': {'args': (),
'state':
<Products.CMFFormController.ControllerState.ControllerState object
at 0xbda1850>},
'repeat': <Products.PageTemplates.TALES.SafeMapping object at
0xa93dbc0>,
'request': <HTTPRequest, URL=http://127.0.0.1:8080/radio2ser/
programs/shows/copy_of_allfunkedup/base_edit>,
'root': <Application at >,
'template': <FSControllerPageTemplate at /radio2ser/base_edit used
for /radio2ser/programs/shows/copy_of_allfunkedup>,
'traverse_subpath': [],
'user': <MembraneUser 'testmember'>}
# Module Products.PageTemplates.ZRPythonExpr, line 47, in __call__
__traceback_info__: member.getProperty('visible_ids',
here.portal_memberdata.getProperty('visible_ids'))
# Module Python expression "member.getProperty('visible_ids',
here.portal_memberdata.getProperty('visible_ids'))", line 1, in
<expression>
# Module AccessControl.ImplPython, line 729, in guarded_getattr
# Module AccessControl.ImplPython, line 671, in aq_validate
# Module AccessControl.ImplPython, line 565, in validate
# Module AccessControl.ImplPython, line 463, in validate
# Module AccessControl.ImplPython, line 810, in raiseVerbose
Unauthorized: Your user account does not have the required
permission. Access to 'portal_memberdata' of (PloneSite at /
radio2ser), acquired through (Show at /radio2ser/programs/shows/
copy_of_allfunkedup), denied. Your user account, testmember, exists
at /radio2ser/acl_users. Access requires one of the following
roles: ['Manager', 'Owner']. Your roles in this context are
['Authenticated', 'Member'].
--
Archive: http://www.openplans.org/projects/remember/lists/remember/
archive/2007/07/1184238907513
To unsubscribe send an email with subject unsubscribe to
[EMAIL PROTECTED] Please contact remember-
[EMAIL PROTECTED] for questions.
--
Archive:
http://www.openplans.org/projects/remember/lists/remember/archive/2007/07/1184346437804
To unsubscribe send an email with subject unsubscribe to [EMAIL PROTECTED]
Please contact [EMAIL PROTECTED] for questions.
