[Erp5-dev] Authorization Problems while using manage_addFile()

[Shrenik Bhura]

As I installed the VerboseSecurity Product to further probe into this
problem, the problem disappeared.
Can anyone explain please?

Thanks,
SB

On Mon, 2006-01-16 at 14:21 +0530, Shrenik Bhura wrote:

> Hello!
> 
> 
> In a zope installation from erp5 site we are unable to use the API manage_addFile(),which is strange because we are being
> able to use the API manage_delObjects() to delete an existing object. 
> 
> Yet we are able to use manage_addFile() in a zope installation from zope site.
> All security related issues have been taken care of. Is it something to do with the way erp5 works and is a specific tweak implemented for erp5 related usage ?
> 
> This is the Error we have encountered..
> 
> *******************************************************************************
> Site Error
> An error was encountered while publishing this resource. 
> 
> Unauthorized
> 
> Sorry, a site error occurred.
> 
> Traceback (innermost last):
> 
>       * Module ZPublisher.Publish, line 175, in publish_module_standard
>       * Module Products.iHotfix, line 88, in new_publish
>       * Module ZPublisher.Publish, line 132, in publish
>       * Module Zope.App.startup, line 204, in zpublisher_exception_hook
>       * Module ZPublisher.Publish, line 101, in publish
>       * Module ZPublisher.mapply, line 88, in mapply
>       * Module ZPublisher.Publish, line 39, in call_object
>       * Module Shared.DC.Scripts.Bindings, line 306, in __call__
>       * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
>       * Module Products.PythonScripts.PythonScript, line 323, in _exec
>       * Module None, line 4, in reset_tab
>         <PythonScript at /VCS/reset_tab>
>         Line 4
>       * Module Shared.DC.Scripts.Bindings, line 306, in __call__
>       * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
>       * Module Products.PythonScripts.PythonScript, line 323, in _exec
>       * Module None, line 1, in refresh_tab
>         <PythonScript at /VCS/refresh_tab>
>         Line 1
>       * Module Shared.DC.Scripts.Bindings, line 306, in __call__
>       * Module Shared.DC.Scripts.Bindings, line 343, in _bindAndExec
>       * Module Products.PythonScripts.PythonScript, line 323, in _exec
>       * Module None, line 9, in update_result
>         <PythonScript at /VCS/update_result>
>         Line 9
> Unauthorized: You are not allowed to access 'manage_addFile' in this
> context (Also, an error occurred while attempting to render the standard
> error message.)
> 
> *******************************************************************************
> 
> We are using 
> Zope Version  (Zope 2.7.8-final, python 2.4.0) 
> Python Version 2.4 
> 
> Any help would be much appreciated.
> 
> Thanks
> 
> -SB
> _______________________________________________
> Erp5-dev mailing list
> Erp5-dev at erp5.org
> http://erp5.org/mailman/listinfo/erp5-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.tiolive.com/pipermail/erp5-dev/attachments/20060116/1d98e5ec/attachment.htm>