[Zope-CMF] Unauthorized: portal_url trying to reply to a news item

[Umesh Soni]

Just to add another data point to this report (I assume that the two
are related as there appears to be a permissions issue).

Freshly updated  CMF-head from  cvs 
Zope-2.4.3-src
PageTemplates-1-4-1
ZTUtils-1.1.3
TAL-1.4.1
CMFLDAP 1.1
LDAPUserFolder 1.0

I instantiate a new portal in the root folder and subscribe as a new
member.  Logged in as the new member I try to create a link and get
the browsers authentication dialig box. Pressing cancel at this point
provides the following traceback. (note: this test uses the portal's
default acl_users folder for authentication).


  You are not authorized to access <em>overrideDiscussionFor</em>.
<!--
Traceback (innermost last):
  File /usr/local/Zope-2.4.3-src/lib/python/ZPublisher/Publish.py, line 223, in publish_module
  File /usr/local/Zope-2.4.3-src/lib/python/ZPublisher/Publish.py, line 187, in publish
  File /usr/local/Zope-2.4.3-src/lib/python/ZPublisher/Publish.py, line 171, in publish
  File /usr/local/Zope-2.4.3-src/lib/python/ZPublisher/mapply.py, line 160, in mapply
    (Object: metadata_edit)
  File /usr/local/Zope-2.4.3-src/lib/python/ZPublisher/Publish.py, line 112, in call_object
    (Object: metadata_edit)
  File /usr/local/Zope-2.4.3-src/lib/python/Shared/DC/Scripts/Bindings.py, line 324, in __call__
    (Object: metadata_edit)
  File /usr/local/Zope-2.4.3-src/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in _bindAndExec
    (Object: metadata_edit)
  File /usr/local/zope-products/Products/CMFCore/FSPythonScript.py, line 115, in _exec
    (Object: metadata_edit)
    (Info: ({'script': <FSPythonScript instance at 8ad9668>, 'context': <Link instance at 8cf98a8>, 'container': <CMFSite instance at 8bae560>, 'traverse_subpath': []}, (None, 'New Link', ['a link'], 'test link', None, None, None, 'text/html', None, None), {}, (None, None, None, None, None, None, None, None, None, None)))
  File Script (Python), line 40, in metadata_edit
  File /usr/local/Zope-2.4.3-src/lib/python/AccessControl/ZopeGuards.py, line 120, in guarded_getattr
    (Object: portal_discussion)
  File /usr/local/Zope-2.4.3-src/lib/python/AccessControl/ZopeGuards.py, line 103, in aq_validate
    (Object: portal_discussion)
  File /usr/local/Zope-2.4.3-src/lib/python/AccessControl/SecurityManager.py, line 149, in validate
  File /usr/local/Zope-2.4.3-src/lib/python/AccessControl/ZopeSecurityPolicy.py, line 229, in validate
Unauthorized: (see above)

-->



Robert Rottermann(robert@redcor.ch)@2001.12.05 16:59:59 +0000:
> When I try to reply to a news Item I am asked for my credentials. (although
> I am already logged in with Manager privileges)
> When I cancel the dialog I get a traceback with
> Unauthorized: portal_url
> 
> What could be the reason for that?
> I am using CMFDecor.
> 
> Thanks
> Robert
> 
> This is the whole traceback
> Unauthorized
> 
> Sorry, a site error occurred.
> 
> Traceback (innermost last):
>   File /var/lib/zope/lib/python/ZPublisher/Publish.py, line 223, in
> publish_module
>   File /var/lib/zope/lib/python/ZPublisher/Publish.py, line 187, in publish
>   File /var/lib/zope/lib/python/ZPublisher/Publish.py, line 171, in publish
>   File /var/lib/zope/lib/python/ZPublisher/mapply.py, line 160, in mapply
>     (Object: discussion_reply)
>   File /var/lib/zope/lib/python/ZPublisher/Publish.py, line 112, in
> call_object
>     (Object: discussion_reply)
>   File /var/lib/zope/lib/python/Products/CMFCore/FSDTMLMethod.py, line 182,
> in __call__
>     (Object: discussion_reply)
>   File /var/lib/zope/lib/python/DocumentTemplate/DT_String.py, line 546, in
> __call__
>     (Object: discussion_reply)
>   File /var/lib/zope/lib/python/Products/CMFCore/FSDTMLMethod.py, line 177,
> in __call__
>     (Object: standard_html_header)
>   File /var/lib/zope/lib/python/DocumentTemplate/DT_String.py, line 546, in
> __call__
>     (Object: standard_html_header)
>   File /var/lib/zope/lib/python/OFS/DTMLMethod.py, line 188, in __call__
>     (Object: standard_top_bar)
>   File /var/lib/zope/lib/python/DocumentTemplate/DT_String.py, line 546, in
> __call__
>     (Object: standard_top_bar)
>   File /var/lib/zope/lib/python/Shared/DC/Scripts/Bindings.py, line 338, in
> __render_with_namespace__
>     (Object: main_top.html)
>   File /var/lib/zope/lib/python/Shared/DC/Scripts/Bindings.py, line 354, in
> _bindAndExec
>     (Object: main_top.html)
>   File /var/lib/zope/lib/python/Products/PageTemplates/ZopePageTemplate.py,
> line 278, in _exec
>     (Object: main_top.html)
> Unauthorized: portal_url
> 
> 
> 
> 
> 
> _______________________________________________
> Zope-CMF maillist  -  Zope-CMF@zope.org
> http://lists.zope.org/mailman/listinfo/zope-cmf
> 
> See http://www.zope.org/Products/PTK/Tracker for bug reports and feature requests

-- 
Umesh Soni