[Zope-dev] strange permission errors again

[Robin Becker]

After the latest round of CVS updates I am again getting strange requests for authorisation in
unusual places. No matter that I use my admin to try and validate they still occur.

Typical piece of code is

 <dtml-with "_.namespace(SUB=include.ZGA_Eval(sub))">
  <dtml-if "_.len(SUB)>0">
   NAVDATA[<dtml-var sequence-index>].flag=<dtml-var sequence-index>;
   NAVSTATE=new Array();
   <dtml-in SUB>
    NAVSTATE[<dtml-var sequence-index>]=new Object();
    NAVSTATE[<dtml-var sequence-index>].ref = '<dtml-var "_['sequence-item'][0]">';
    NAVSTATE[<dtml-var sequence-index>].label = '<dtml-var "_['sequence-item'][1]">';
   </dtml-in>
   NAVDATA[<dtml-var sequence-index>].sub=NAVSTATE;
  <dtml-else>
   NAVDATA[<dtml-var sequence-index>].flag=-1;
  </dtml-if>
 </dtml-with>

Brian fixed this up before and it has crept back in somehow.

Zope Error

Zope has encountered an error while publishing this resource. 

Unauthorized

Sorry, a Zope error occurred.

Traceback (innermost last):
  File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 222, in publish_module
  File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 187, in publish
  File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 171, in publish
  File C:\Python\devel\Zope\lib\python\ZPublisher\mapply.py, line 160, in mapply
    (Object: index_html)
  File C:\Python\devel\Zope\lib\python\ZPublisher\Publish.py, line 112, in call_object
    (Object: index_html)
  File C:\Python\devel\Zope\lib\python\OFS\DTMLMethod.py, line 167, in __call__
    (Object: index_html)
  File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_String.py, line 502, in __call__
    (Object: index_html)
  File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_In.py, line 691, in renderwob
    (Object: NavData)
  File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_With.py, line 146, in render
    (Object: _.namespace(SUB=include.ZGA_Eval(sub)))
  File C:\Python\devel\Zope\lib\python\DocumentTemplate\DT_Util.py, line 327, in eval
    (Object: _.len(SUB)>0)
    (Info: SUB)
  File C:\Python\devel\Zope\lib\python\OFS\DTMLMethod.py, line 189, in validate
    (Object: index_html)
  File C:\Python\devel\Zope\lib\python\AccessControl\SecurityManager.py, line 139, in validate
  File C:\Python\devel\Zope\lib\python\AccessControl\ZopeSecurityPolicy.py, line 158, in
validate
Unauthorized: SUB
-- 
Robin Becker