[Erp5-dev] Authorization Problems while using manage

Shrenik Bhura

2006-01-16 09:34:53 UTC

As I installed the VerboseSecurity Product to further probe into this
problem, the problem disappeared.
Can anyone explain please?

Thanks,
SB

Post by Shrenik Bhura
Hello!
In a zope installation from erp5 site we are unable to use the API manage_addFile(),which is strange because we are being
able to use the API manage_delObjects() to delete an existing object.
Yet we are able to use manage_addFile() in a zope installation from zope site.
All security related issues have been taken care of. Is it something to do with the way erp5 works and is a specific tweak implemented for erp5 related usage ?
This is the Error we have encountered..
*******************************************************************************
Site Error
An error was encountered while publishing this resource.
Unauthorized
Sorry, a site error occurred.
* Module ZPublisher.Publish, line 175, in publish_module_standard
* Module Products.iHotfix, line 88, in new_publish
* Module ZPublisher.Publish, line 132, in publish
* Module Zope.App.startup, line 204, in zpublisher_exception_hook
* Module ZPublisher.Publish, line 101, in publish
* Module ZPublisher.mapply, line 88, in mapply
* Module ZPublisher.Publish, line 39, in call_object
* Module Shared.DC.Scripts.Bindings, line 306, in __call__
* Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
* Module Products.PythonScripts.PythonScript, line 323, in _exec
* Module None, line 4, in reset_tab
<PythonScript at /VCS/reset_tab>
Line 4
* Module Shared.DC.Scripts.Bindings, line 306, in __call__
* Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
* Module Products.PythonScripts.PythonScript, line 323, in _exec
* Module None, line 1, in refresh_tab
<PythonScript at /VCS/refresh_tab>
Line 1
* Module Shared.DC.Scripts.Bindings, line 306, in __call__
* Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
* Module Products.PythonScripts.PythonScript, line 323, in _exec
* Module None, line 9, in update_result
<PythonScript at /VCS/update_result>
Line 9
Unauthorized: You are not allowed to access 'manage_addFile' in this
context (Also, an error occurred while attempting to render the standard
error message.)
*******************************************************************************
We are using
Zope Version (Zope 2.7.8-final, python 2.4.0)
Python Version 2.4
Any help would be much appreciated.
Thanks
-SB
_______________________________________________
Erp5-dev mailing list
Erp5-dev at erp5.org
http://erp5.org/mailman/listinfo/erp5-dev

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.tiolive.com/pipermail/erp5-dev/attachments/20060116/1d98e5ec/attachment.htm>