[Zope] Giving access to error_log.showEntry to non-Manager users

martin.gfeller at comit.ch martin.gfeller at comit.ch
Mon Jan 15 05:26:27 EST 2007


Dear all,

I'm trying to give all authenticated users access to the error log of an

error that they just encountered. I'm using the error_log_url available
in
the standard_error_message to direct the user to the appropriate error
log.

This works fine for users with Manager role, but I cannot make it work
for other authenticated users. I modified the error_log access to 
include 'View', 'View management screens'  and 'Log Site Errors', 
but it doesn't help, unless I give 'View management screens' 
to Authenticated in the Zope root, which opens up too much. 

The actual access error is on 'manage_page_header' - I append the error 
traceback. 

I've also tried to access the error_log through a DTML with
proxy set to Manager, to no avail. 

Any tips? 
Thank you and best regards,
Martin Gfeller, COMIT AG, mailto:martin.gfeller at comit.ch



Error Traceback, Zope 2.10.1 on Windows. 

SERVER_SOFTWARE 'Zope/(unreleased version, python 2.4.4, win32)
ZServer/1.1'

Traceback (innermost last):
  Module ZPublisher.Publish, line 115, in publish
  Module ZPublisher.mapply, line 88, in mapply
  Module ZPublisher.Publish, line 41, in call_object
  Module Shared.DC.Scripts.Bindings, line 313, in __call__
  Module Shared.DC.Scripts.Bindings, line 350, in _bindAndExec
  Module Products.PageTemplates.PageTemplateFile, line 121, in _exec
  Module Products.PageTemplates.PageTemplate, line 89, in pt_render
  Module zope.pagetemplate.pagetemplate, line 117, in pt_render
  Module zope.tal.talinterpreter, line 271, in __call__
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 534, in do_optTag_tal
  Module zope.tal.talinterpreter, line 516, in no_tag
  Module zope.tal.talinterpreter, line 346, in interpret
  Module zope.tal.talinterpreter, line 745, in do_insertStructure_tal
  Module zope.tales.tales, line 696, in evaluate
   - URL: showEntry
   - Line 1, Column 0
   - Expression: <PathExpr standard:'here/manage_page_header'>
   - Names:
      {'container': <SiteErrorLog at /Quantax/error_log>,
       'context': <SiteErrorLog at /Quantax/error_log>,
       'default': <object object at 0x00A3B528>,
       'here': <SiteErrorLog at /Quantax/error_log>,
       'loop': {},
       'nothing': None,
       'options': {'args': ()},
       'repeat': <Products.PageTemplates.Expressions.SafeMapping object
at
0x05079DA0>,
       'request': <HTTPRequest,
URL=http://127.0.0.1:8080/Quantax/error_log/showEntry>,
       'root': <Application at >,
       'template': <PageTemplateFile at /Quantax/error_log/showEntry>,
       'user': <GRUFUser 'dealer'>}
  Module zope.tales.expressions, line 217, in __call__
  Module Products.PageTemplates.Expressions, line 122, in _eval
  Module zope.tales.expressions, line 124, in _eval
  Module Products.PageTemplates.Expressions, line 71, in
boboAwareZopeTraverse
  Module OFS.Traversable, line 301, in restrictedTraverse
  Module OFS.Traversable, line 274, in unrestrictedTraverse
   - __traceback_info__: ([], 'manage_page_header')
Unauthorized: You are not allowed to access 'manage_page_header' in this
context




More information about the Zope mailing list