[Zope] Verbosesecurity: "your user account is defined outside the context of the object accessed"

Brian Lloyd brian at zope.com
Wed Sep 10 11:38:28 EDT 2003


This usually indicates a wrapping problem; does getTranscript
or getEntry create an object on the fly and forget to do
return obj.__of__(self) ?



Brian Lloyd        brian at zope.com
V.P. Engineering   540.361.1716
Zope Corporation   http://www.zope.com


> -----Original Message-----
> From: zope-bounces at zope.org [mailto:zope-bounces at zope.org]On Behalf Of
> Andreas Jung
> Sent: Wednesday, September 10, 2003 8:33 AM
> To: zope at zope.org
> Subject: [Zope] Verbosesecurity: "your user account is defined outside
> the context of the object accessed"
>
>
> Inside a ZPT I am calling "python
> here.getTranscript().getEntry(1).getTimestamp()".
> All subobjects are derived from Persistent and Implicit and are setup for
> public access
> (declareObjectPublic()). The getTimestamp() method is protected by the
> 'View'
> permission.
>
> When the ZPT is called then Unauthorized is raised:
>
> Exception Value  	Your user account is defined outside the
> context of the
> object being accessed. Access to 'getTimestamp' of (TranscriptEntry
> instance at 933db28) denied. Your user account, admin, exists at
> /acl_users. Access requires one of the following roles: ['Manager'].
>
> The account 'admin' is definited in /acl_users and has the Manager role
> and the View permission is granted to all roles....very weird.
>
> Any ideas?
>
> Andreas
>
> _______________________________________________
> Zope maillist  -  Zope at zope.org
> http://mail.zope.org/mailman/listinfo/zope
> **   No cross posts or HTML encoding!  **
> (Related lists -
>  http://mail.zope.org/mailman/listinfo/zope-announce
>  http://mail.zope.org/mailman/listinfo/zope-dev )
>




More information about the Zope mailing list