<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 TRANSITIONAL//EN">
<HTML>
<HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; CHARSET=UTF-8">
<META NAME="GENERATOR" CONTENT="GtkHTML/3.6.2">
</HEAD>
<BODY>
As I installed the VerboseSecurity Product to further probe into this problem, the problem disappeared.<BR>
Can anyone explain please?<BR>
<BR>
Thanks,<BR>
SB<BR>
<BR>
On Mon, 2006-01-16 at 14:21 +0530, Shrenik Bhura wrote:<BR>
<BLOCKQUOTE TYPE=CITE>
<FONT COLOR="#000000">Hello!</FONT><BR>
<BR>
<PRE>
<FONT COLOR="#000000">In a zope installation from erp5 site we are unable to use the API manage_addFile(),which is strange because we are being</FONT>
<FONT COLOR="#000000">able to use the API manage_delObjects() to delete an existing object. </FONT>
<FONT COLOR="#000000">Yet we are able to use manage_addFile() in a zope installation from zope site.</FONT>
<FONT COLOR="#000000">All security related issues have been taken care of. Is it something to do with the way erp5 works and is a specific tweak implemented for erp5 related usage ?</FONT>
<FONT COLOR="#000000">This is the Error we have encountered..</FONT>
<FONT COLOR="#000000">*******************************************************************************</FONT>
<FONT COLOR="#000000">Site Error</FONT>
<FONT COLOR="#000000">An error was encountered while publishing this resource. </FONT>
<FONT COLOR="#000000">Unauthorized</FONT>
<FONT COLOR="#000000">Sorry, a site error occurred.</FONT>
<FONT COLOR="#000000">Traceback (innermost last):</FONT>
<FONT COLOR="#000000"> * Module ZPublisher.Publish, line 175, in publish_module_standard</FONT>
<FONT COLOR="#000000"> * Module Products.iHotfix, line 88, in new_publish</FONT>
<FONT COLOR="#000000"> * Module ZPublisher.Publish, line 132, in publish</FONT>
<FONT COLOR="#000000"> * Module Zope.App.startup, line 204, in zpublisher_exception_hook</FONT>
<FONT COLOR="#000000"> * Module ZPublisher.Publish, line 101, in publish</FONT>
<FONT COLOR="#000000"> * Module ZPublisher.mapply, line 88, in mapply</FONT>
<FONT COLOR="#000000"> * Module ZPublisher.Publish, line 39, in call_object</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 306, in __call__</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec</FONT>
<FONT COLOR="#000000"> * Module Products.PythonScripts.PythonScript, line 323, in _exec</FONT>
<FONT COLOR="#000000"> * Module None, line 4, in reset_tab</FONT>
<FONT COLOR="#000000"> <PythonScript at /VCS/reset_tab></FONT>
<FONT COLOR="#000000"> Line 4</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 306, in __call__</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec</FONT>
<FONT COLOR="#000000"> * Module Products.PythonScripts.PythonScript, line 323, in _exec</FONT>
<FONT COLOR="#000000"> * Module None, line 1, in refresh_tab</FONT>
<FONT COLOR="#000000"> <PythonScript at /VCS/refresh_tab></FONT>
<FONT COLOR="#000000"> Line 1</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 306, in __call__</FONT>
<FONT COLOR="#000000"> * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec</FONT>
<FONT COLOR="#000000"> * Module Products.PythonScripts.PythonScript, line 323, in _exec</FONT>
<FONT COLOR="#000000"> * Module None, line 9, in update_result</FONT>
<FONT COLOR="#000000"> <PythonScript at /VCS/update_result></FONT>
<FONT COLOR="#000000"> Line 9</FONT>
<FONT COLOR="#000000">Unauthorized: You are not allowed to access 'manage_addFile' in this</FONT>
<FONT COLOR="#000000">context (Also, an error occurred while attempting to render the standard</FONT>
<FONT COLOR="#000000">error message.)</FONT>
<FONT COLOR="#000000">*******************************************************************************</FONT>
<FONT COLOR="#000000">We are using </FONT>
<FONT COLOR="#000000">Zope Version (Zope 2.7.8-final, python 2.4.0) </FONT>
<FONT COLOR="#000000">Python Version 2.4 </FONT>
<FONT COLOR="#000000">Any help would be much appreciated.</FONT>
<FONT COLOR="#000000">Thanks</FONT>
<FONT COLOR="#000000">-SB</FONT>
<FONT COLOR="#000000">_______________________________________________</FONT>
<FONT COLOR="#000000">Erp5-dev mailing list</FONT>
<FONT COLOR="#000000"><A HREF="mailto:Erp5-dev@erp5.org">Erp5-dev@erp5.org</A></FONT>
<FONT COLOR="#000000"><A HREF="http://erp5.org/mailman/listinfo/erp5-dev">http://erp5.org/mailman/listinfo/erp5-dev</A></FONT>
</PRE>
</BLOCKQUOTE>
</BODY>
</HTML>