Ticket #1541 (closed defect: fixed)

Opened 14 years ago

Last modified 14 years ago

Bug when trying to consult directories

Reported by: sguitter Owned by: fguillaume
Priority: P1 Milestone: CPS 3.4.1
Component: CPSDirectory Version: 3.4.0
Severity: normal Keywords:
Cc:

Description

I got this error message when I clicked on a member's name to see his card (?). It happened on  http://bart:11080/cps

Traceback (innermost last):

  • Module ZPublisher.Publish, line 114, in publish
  • Module ZPublisher.mapply, line 88, in mapply
  • Module ZPublisher.Publish, line 40, in call_object
  • Module Shared.DC.Scripts.Bindings, line 311, in call
  • Module Shared.DC.Scripts.Bindings, line 348, in _bindAndExec
  • Module Products.CMFCore.FSPageTemplate, line 195, in _exec
  • Module Products.CMFCore.FSPageTemplate, line 134, in pt_render
  • Module Products.PageTemplates.PageTemplate?, line 104, in pt_render <FSPageTemplate at /cps/cpsdirectory_entry_view>
  • Module TAL.TALInterpreter, line 238, in call
  • Module TAL.TALInterpreter, line 281, in interpret
  • Module TAL.TALInterpreter, line 507, in do_setLocal_tal
  • Module Products.PageTemplates.TALES, line 221, in evaluate URL: file:CPSDirectory/skins/cps_directory/cpsdirectory_entry_view.pt Line 1, Column 0 Expression: <PythonExpr? dir.renderEntryDetailed(id)> Names:

{'container': <CPSDefaultSite at /cps>,

'context': <CPSDefaultSite at /cps>, 'default': <Products.PageTemplates.TALES.Default instance at 0xb71e81cc>, 'here': <CPSDefaultSite at /cps>, 'loop': <Products.PageTemplates.TALES.SafeMapping? object at 0xb2ef4cec>, 'modules': <Products.PageTemplates.ZRPythonExpr._SecureModuleImporter instance at 0xb718ac8c>, 'nothing': None, 'options': {'args': ()}, 'repeat': <Products.PageTemplates.TALES.SafeMapping? object at 0xb2ef4cec>, 'request': <HTTPRequest, URL= http://bart:11080/cps/cpsdirectory_entry_view>, 'root': <Application at >, 'template': <FSPageTemplate at /cps/cpsdirectory_entry_view>, 'traverse_subpath': [], 'user': <CPSUser jmartin>}

  • Module Products.PageTemplates.ZRPythonExpr, line 47, in call traceback_info: dir.renderEntryDetailed(id)
  • Module Python expression "dir.renderEntryDetailed(id)", line 1, in <expression>
  • Module Products.CPSDirectory.BaseDirectory?, line 556, in renderEntryDetailed
  • Module Products.CPSDirectory.BaseDirectory?, line 306, in checkViewEntryAllowed

Unauthorized: No view access to entry

Change History

comment:1 Changed 14 years ago by ogrisel

  • Status changed from new to closed
  • Resolution set to fixed

[34981] - temporary fixed by relaxing security checks: one would need entry level ACL aware searchEntries to use GroupMember? and Owner entry localroles in the ACL entry view setting.

Note: See TracTickets for help on using tickets.