[Zope] strange authorization behaviour

[Ingo Assenmacher]

Hi All.

I have reported this earlier, but I missed to give in the trace-back.
The Situation is the following:
I can access a certain method (render) only when using the super-user
account. I have two similiar render-methods in two very similiar ZClasses
and I have set the permissions exactly alike. Rendering the one class is
ok for non-super-users, but rendering the other one gives this:
Zope Error



Zope has encountered an error while publishing this resource. 



Unauthorized

You are not authorized to access render. 


Traceback (innermost last):
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/ZPublisher/Publish.py,
line 214, in publish_module
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/ZPublisher/Publish.py,
line 179, in publish
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/ZPublisher/Publish.py,
line 165, in publish
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/ZPublisher/mapply.py,
line 160, in mapply
    (Object: index_html)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/ZPublisher/Publish.py,
line 102, in call_object
    (Object: index_html)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/OFS/DTMLMethod.py, line
145, in __call__
    (Object: index_html)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_String.py,
line 502, in __call__
    (Object: index_html)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/OFS/DTMLMethod.py, line
141, in __call__
    (Object: navigation_tree)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_String.py,
line 502, in __call__
    (Object: navigation_tree)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/TreeDisplay/TreeTag.py,
line 154, in render
    (Object: a tree tag)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/TreeDisplay/TreeTag.py,
line 245, in tpRender
    (Object: ElementWithAttributes)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/TreeDisplay/TreeTag.py,
line 491, in tpRenderTABLE
    (Object: ElementWithAttributes)
    (Info: (['AAAAAAAABwY=', [['AAAAAAAADCI=', [['AAAAAAAAGSg=']]]]],
{'url': 'tpURL', 'childless_decoration': '', 'id': 'tpId',
'branches_expr': <method Eval.eval of Eval instance at 868d7b0>, 'sort':
'id'}, [['AAAAAAAABwY=', [['AAAAAAAADCI=', [['AAAAAAAAGSg=']]]]]],
[['AAAAAAAABwY=', [['AAAAAAAADCI=', [['AAAAAAAAGSg=']]]]]]))
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/TreeDisplay/TreeTag.py,
line 491, in tpRenderTABLE
    (Object: ElementWithAttributes)
    (Info: (['AAAAAAAADCI=', [['AAAAAAAAGSg=']]], {'url': 'tpURL',
'childless_decoration': '', 'id': 'tpId', 'branches_expr': <method
Eval.eval of Eval instance at 868d7b0>, 'sort': 'id'}, [['AAAAAAAABwY=',
[['AAAAAAAADCI=', [['AAAAAAAAGSg=']]]]]], [['AAAAAAAADCI=',
[['AAAAAAAAGSg=']]]]))
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/TreeDisplay/TreeTag.py,
line 408, in tpRenderTABLE
    (Object: Renderable)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/OFS/DTMLMethod.py, line
141, in __call__
    (Object: render)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_String.py,
line 502, in __call__
    (Object: render)
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_With.py,
line 148, in render
    (Object:
_[absolute_url()[_.string.rfind(absolute_url()[:_.string.rfind(absolute_url(),'/')],'/')+1:_.string.rfind(absolute_url(),'/')]])
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_In.py,
line 691, in renderwob
    (Object: Catalog(meta_type='material', zuordnung=title))
  File
/amnt/home/assen/Zope-2.1.1-linux2-x86/lib/python/DocumentTemplate/DT_With.py,
line 148, in render
    (Object: resolve_url(Catalog.getpath(data_record_id_), REQUEST))
Unauthorized: (see above)

The difference between the one object is, that it does not look up the
elements in a Catalog.
Any hints?

Regards, Ingo.