You are not allowed to access ... in this context
Hi, I have a problem with a python script that has the Manager proxy role. It creates a portal folder (Plone Folder) and then tries to modify the newly created object. The ID is passed in the 'username' parameter: portal = context.portal_url.getPortalObject() profiles = portal.profiles profiles.invokeFactory(id=username, type_name='Folder') This works just fine and as expected. Now I wouldd like to modify the folder, and am trying to get an object: profile = getattr(profiles, username) But this fails: Unauthorized: You are not allowed to access <username> in this context The script has the Manager proxy role, and I completely don't understand why even without it, I should not be allowed to obtain a reference to the folder. I would appreciate any hints. Thanks, -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver! "a cigarette is the perfect type of pleasure. it is exquisite, and it leaves one unsatisfied." -- oscar wilde
martin f krafft wrote:
The script has the Manager proxy role, and I completely don't understand why even without it, I should not be allowed to obtain a reference to the folder.
What does the VerboseSecurity product throw up? Chris
also sprach Chris Withers <chrisw@nipltd.com> [2003.10.29.2327 +0100]:
The script has the Manager proxy role, and I completely don't understand why even without it, I should not be allowed to obtain a reference to the folder.
What does the VerboseSecurity product throw up?
Nothing, interestingly. It is installed and works fine otherwise, but this error is (reproducibly) not caught by VerboseSecurity. -- martin; (greetings from the heart of the sun.) \____ echo mailto: !#^."<*>"|tr "<*> mailto:" net@madduck invalid/expired pgp subkeys? use subkeys.pgp.net as keyserver! "wovon man nicht sprechen kann, darüber muß man schweigen." -- wittgenstein
participants (2)
-
Chris Withers -
martin f krafft