Function "manage_ paste" ignores proxy manager role

Bug #142782 reported by Bug Importer
0
Affects Status Importance Assigned to Milestone
Zope 2
New
Medium
Unassigned

Bug Description

Function "manage_pasteObjects" used in a Python-Script works by being logged in
with the "Manager"-Role

Otherwise giving a Python-Script the Proxy-Role "Manager" and using "manage_pasteObjects"
by this Script causes the following Error:

Error Type: Unauthorized
Error Value: You are not allowed to access manage_pasteObjects in this
context

Tags: bug zope
Revision history for this message
Dylan Jay (zope) wrote :

I've come across this bug and have found references to it going back years. I'm suprised it still exists. Have I missed some reference to a reason why it still exists? I'd have a go at fixing it myself but I'm not 100% confident with the security code

Revision history for this message
constantin (constantin-zope) wrote :

This bug just bit me. First mention of it in the mailing lists was back in 2001.

Is there a important reason this is still not solved?

Revision history for this message
constantin (constantin-zope) wrote :

BTW, the bug only seems to bite when using a script in a workflow. Maybe this is the wrong collector to file the bug?

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.