Bryan C. Andregg writes:

I have a script that calls hasattr(); the script is proxied as "Author" a role that I've created which has the basic add and change files but not much else.

What security setting controls whether or not hasattr is going to work? As far as I know, "hasattr" is public.

But the object you are checking may protect its access. Usually, either "View" or "Access content information" is used for this purpose, though others are possible, too. Dieter