[Erp5-dev] Authorization Problems while using manage_addFile()

[Shrenik Bhura]

Hello!


In a zope installation from erp5 site we are unable to use the API manage_addFile(),which is strange because we are being
able to use the API manage_delObjects() to delete an existing object. 

Yet we are able to use manage_addFile() in a zope installation from zope site.
All security related issues have been taken care of. Is it something to do with the way erp5 works and is a specific tweak implemented for erp5 related usage ?

This is the Error we have encountered..

*******************************************************************************
Site Error
An error was encountered while publishing this resource. 

Unauthorized

Sorry, a site error occurred.

Traceback (innermost last):

      * Module ZPublisher.Publish, line 175, in publish_module_standard
      * Module Products.iHotfix, line 88, in new_publish
      * Module ZPublisher.Publish, line 132, in publish
      * Module Zope.App.startup, line 204, in zpublisher_exception_hook
      * Module ZPublisher.Publish, line 101, in publish
      * Module ZPublisher.mapply, line 88, in mapply
      * Module ZPublisher.Publish, line 39, in call_object
      * Module Shared.DC.Scripts.Bindings, line 306, in __call__
      * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
      * Module Products.PythonScripts.PythonScript, line 323, in _exec
      * Module None, line 4, in reset_tab
        <PythonScript at /VCS/reset_tab>
        Line 4
      * Module Shared.DC.Scripts.Bindings, line 306, in __call__
      * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
      * Module Products.PythonScripts.PythonScript, line 323, in _exec
      * Module None, line 1, in refresh_tab
        <PythonScript at /VCS/refresh_tab>
        Line 1
      * Module Shared.DC.Scripts.Bindings, line 306, in __call__
      * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
      * Module Products.PythonScripts.PythonScript, line 323, in _exec
      * Module None, line 9, in update_result
        <PythonScript at /VCS/update_result>
        Line 9
Unauthorized: You are not allowed to access 'manage_addFile' in this
context (Also, an error occurred while attempting to render the standard
error message.)

*******************************************************************************

We are using 
Zope Version  (Zope 2.7.8-final, python 2.4.0) 
Python Version 2.4 

Any help would be much appreciated.

Thanks

-SB
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.tiolive.com/pipermail/erp5-dev/attachments/20060116/95e20c02/attachment.htm>