[Zope-dev] 2.7rc1 - Unauthorized: You are not allowed to access '' in this context

[robert rottermann]

Stuart,
I do have the same problem. And it occurs using 2.7x and 2.6x.

I am using local roles heavilly so I wonder whether it is linked to that
Robert
Stuart Bishop wrote:

> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
> In Shared.DC.Scripts.Bindings._getContext(self), there
> seems to be a new security check:
>     getSecurityManager().validate(parent, container, '', self)
>
> This is now giving me the following traceback:
>
> Traceback (innermost last):
>   Module ZPublisher.Publish, line 100, in publish
>   Module ZPublisher.mapply, line 88, in mapply
>   Module ZPublisher.Publish, line 40, in call_object
>   Module Products.CGPublisher.storage.Storage, line 911, in editPane
>   Module Shared.DC.Scripts.Bindings, line 261, in __call__
>   Module Shared.DC.Scripts.Bindings, line 292, in _bindAndExec
>   Module Products.PageTemplates.PageTemplateFile, line 106, in _exec
>   Module Products.PageTemplates.PageTemplate, line 90, in pt_render
>    - <PageTemplateFile at /CGPublisher/w
>
>Traceback (innermost last):
>  Module ZPublisher.Publish, line 98, in publish
>  Module ZPublisher.mapply, line 88, in mapply
>  Module ZPublisher.Publish, line 39, in call_object
>  Module Products.CMFCore.FSPythonScript, line 92, in __call__
>  Module Shared.DC.Scripts.Bindings, line 261, in __call__
>  Module Shared.DC.Scripts.Bindings, line 292, in _bindAndExec
>  Module Products.CMFCore.FSPythonScript, line 126, in _exec
>   - __traceback_info__: ({'traverse_subpath': [], 'container': <PloneSite instance at 8bbed10>, 'context': <PloneFolder instance at 96fb608>, 'script': <FSPythonScript at /zehnder/zehnder/createObject used for /zehnder/zehnder/tasklist/Task.2004-01-19.3020/Attachments>}, (None, 'File', None), {}, (None, None, None))
>  Module None, line 12, in createObject
>  Module Products.CMFCore.PortalFolder, line 362, in invokeFactory
>  Module Products.CMFCore.TypesTool, line 824, in constructContent
>  Module Products.CMFCore.TypesTool, line 516, in constructInstance
>  Module Products.CMFCore.TypesTool, line 420, in _finishConstruction
>  Module Products.CMFCore.CMFCatalogAware, line 101, in notifyWorkflowCreated
>  Module Products.CMFPlone.WorkflowTool, line 26, in notifyCreated
>  Module Products.CMFCore.WorkflowTool, line 362, in notifyCreated
>  Module Products.DCWorkflow.DCWorkflow, line 367, in notifyCreated
>  Module Products.DCWorkflow.DCWorkflow, line 440, in _changeStateOf
>  Module Products.DCWorkflow.DCWorkflow, line 543, in _executeTransition
>  Module Shared.DC.Scripts.Bindings, line 261, in __call__
>  Module Shared.DC.Scripts.Bindings, line 290, in _bindAndExec
>  Module Shared.DC.Scripts.Bindings, line 1, in ?
>  Module Shared.DC.Scripts.Bindings, line 224, in _getContext
>Unauthorized: You are not allowed to access  in this context
>  
>
> orks/2/5/source/getaway/details/editPaneHelper>
>   Module Products.PageTemplates.PageTemplateFile, line 74, in 
> pt_getContext
>   Module Shared.DC.Scripts.Bindings, line 224, in _getContext
>   Module AccessControl.ImplPython, line 398, in validate
>   Module AccessControl.ImplPython, line 263, in validate
> Unauthorized: You are not allowed to access '' in this context
>
>
> editPaneHelper is just a PageTemplateFile. Storage.editPane
> (Python - not Python Script) is calling it like:
>     return self.editPaneHelper(**options)
>
>
> Can anyone give me a hint on tracking this down? I have so far been
> unable to write a minimal example that fails (they all work), so I'm
> unsure if this is a Zope problem or my problem.
>
>
> - --  Stuart Bishop <stuart at stuartbishop.net>
> http://www.stuartbishop.net/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.2.3 (Darwin)
>
> iD8DBQFADPECAfqZj7rGN0oRAgUYAJsG+0Bx51I2ZBufS476v7mbOIjT7QCgmBD/
> NfboK3y2rSJiT/eR55/ECP8=
> =ctqN
> -----END PGP SIGNATURE-----
>
>
> _______________________________________________
> Zope-Dev maillist  -  Zope-Dev at zope.org
> http://mail.zope.org/mailman/listinfo/zope-dev
> **  No cross posts or HTML encoding!  **
> (Related lists - http://mail.zope.org/mailman/listinfo/zope-announce
> http://mail.zope.org/mailman/listinfo/zope )
>
>