The product.py doesn't import the Unauthorized exception.
Bug watches keep track of this bug in other bug trackers.