Authorization failure
Hi there ! I found a strange behaviour in Zope yesterday. I have the following contruction in an HTML - Object : <dtml-if "feldname == 'Freikonto'"> <dtml-call "REQUEST.set('freikonto', feldwert)"> <dtml-elif "feldname == 'Konto'"> <dtml-call "REQUEST.set('konto', feldwert)"> </dtml-if> Now the "feldname == 'Freikonto'" clause isn't necessary anymore. So I thought I just comment this section. The result would look like this: <dtml-comment> <dtml-if "feldname == 'Freikonto'"> <dtml-call "REQUEST.set('freikonto', feldwert)"> </dtml-comment> <dtml-if "feldname == 'Konto'"> <dtml-call "REQUEST.set('konto', feldwert)"> </dtml-if> If I try to save these changes, Zope complains, that I'm not authorized although I'm superuser and have all rights. But if I delete this lines instead commenting them, it works. Really strange. Any ideas ? Thanks. YenZi Mit freundlichem Gruss Jens Sander innominate AG - Sofware-Entwicklung -- sander@innominate.de innominate AG networking people fon: +49.30.308806-20 fax: -77 web: http://innominate.de pgp: /pgp/js
sander@innominate.de schrieb: [...]
<dtml-comment> <dtml-if "feldname == 'Freikonto'"> <dtml-call "REQUEST.set('freikonto', feldwert)"> </dtml-comment> <dtml-if "feldname == 'Konto'"> <dtml-call "REQUEST.set('konto', feldwert)"> </dtml-if>
hmmm .. this shouldn't work, because Zope will try to find the ending </dtml-if> for the first <dtml-if>, even if it's nested by a <dtml-comment>.
If I try to save these changes, Zope complains, that I'm not authorized although I'm superuser and have all rights.
I get the same from time to time if I try to save somehow buggy dtml. Repairing the code - as you did - solved it every time. hth, Thomas
participants (2)
-
sander@innominate.de -
Thomas Weiner