[Zope3-Users] ForbiddenAttribute when adding to a folder

Tim Terlegård tim at se.linux.org
Sat Oct 21 06:18:54 EDT 2006


Is there a way to add content without having @@+ in the URL? For
instance I'd like the url for adding events to be /addEvent.

I get security problems when not having @@+ in the URL. I have this view:

  <browser:page
      for="zope.app.container.interfaces.IWriteContainer"
      name="addEvent"
      class=".eventforms.EventAddForm"
      permission="zope.ManageContent"
      />

When I hit the submit button in this add form I get an error:
ForbiddenAttribute: ('add', <zope.app.folder.folder.Folder object at
0xb6e65d2c>)

I realize IWriteContainer might not be the right interface, it doesn't
have any add method.

Should I have for="zope.app.container.interfaces.IAdding" instead and
somehow add an adapter from IFolder to IAdding or how would I do this?

Tim


More information about the Zope3-users mailing list