[Zope] ZClass permissions problem

[Tres Seaver]

While attempting to test the add form for a ZClass, in a container ZClass for
which my effective roles are [ 'Manager', 'Owner' ], I get the following error:

  <H2>Zope Error</H2>
  <P>Zope has encountered an error while publishing this resource.
  </P>
  <P><STRONG>Unauthorized</STRONG></P>
  
  You are not authorized to access <em>FCCS_Request</em>.
<!--
Traceback (innermost last):
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/ZPublisher/Publish.py, line
214, in publish_module
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/ZPublisher/Publish.py, line
179, in publish
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/ZPublisher/Publish.py, line
165, in publish
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/ZPublisher/mapply.py, line
160, in mapply
    (Object: FCCS_Request_add)
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/ZPublisher/Publish.py, line
102, in call_object
    (Object: FCCS_Request_add)
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/OFS/DTMLMethod.py, line 145,
in __call__
    (Object: FCCS_Request_add)
  File
/home/zope/Zope-2.0.1-linux2-x86/lib/python/DocumentTemplate/DT_String.py, line
502, in __call__
    (Object: FCCS_Request_add)
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/DocumentTemplate/DT_With.py,
line 133, in render
    (Object: FCCS_Request.createInObjectManager(REQUEST['id'], REQUEST))
  File /home/zope/Zope-2.0.1-linux2-x86/lib/python/DocumentTemplate/DT_Util.py,
line 315, in eval
    (Object: FCCS_Request.createInObjectManager(REQUEST['id'], REQUEST))
Unauthorized: (see above)


Obviously, I screwed up the permissions -- any clues as to where?  The
manage_access page for the container ZClass shows the "Add FCCS_Request"
permission as both acquired and checked for the Manager role.

Clues:

* This problem continues even if I comment out the guts of the dtml-with 
  block (so I am assuming that it is related to the
  FCCS_Request.createInObjectManager() call, and not one of the nested 
  calls.

* FCCS_Request is fairly deeply nested in the Product, as follows:

     
  FCCS_Root (ObjectManager, ZCatalog)

      FCCS_Requestor (CatalogAware, ObjectManager)

         FCCS_Request (CatalogAware, ObjectManager)

            FCCS_Respondent (CatalogAware)


  I am trying to create a FCCS_Request inside a FCCS_Requestor.

TIA!

Tres.
-- 
=========================================================
Tres Seaver         tseaver@palladion.com    713-523-6582
Palladion Software  http://www.palladion.com