[Zope-CMF] Re: 'portal_membership.getMemberById' became inaccessible

[Tres Seaver]

Alec Mitchell wrote:
> On Tuesday 25 May 2004 05:44 am, Rupert Redington wrote:
> 
>>"The owner of the executing script does not have the required
>>permission. Access to 'getMemberById' of (MembershipTool at
>>/newsite/portal_membership) denied. Access requires one of the following
>>roles: ['Manager']. The executing script is (PythonScript at
>>/newsite/getNickNameNow used for /newsite/portal_memberdata/Academic),
>>owned by Anonymous User, who has the roles ['Anonymous']."
>>
> 
> The answer is here.  The script is owned by Anonymous, so it cannot do 
> anything that anonymous cannot do (this is a security feature to prevent 
> trojan horses).  You need to have a manager take ownership of the script.  
> Chances are the user who originally created the script was deleted at some 
> point, hence the anonymous ownership.  Good luck.

Excellent call!  We should probably add code to Zope which logs a whiny 
message whenever its 'getExecutableOwner' bit can't find the user.

Tres.
-- 
===============================================================
Tres Seaver                                tseaver at zope.com
Zope Corporation      "Zope Dealers"       http://www.zope.com