• Remember Mailing List

Workflow security issue

from "Eric Thomas" on Mar 05, 2007 03:59 PM
Hi all.  I'm trying to use remember with the member_approval_workflow and
feel like it is really close to working.  No new AT types here, just the
standard membrane/remember types.  Basically, I'm hoping to allow Anonymous
users to register themselves as new members, but have the workflow put the
new member into a pending state which must be approved by a reviewer.

I've got the workflow transtions to where they look correct, but have a
permissions issue.  Currently, a user can choose 'Join' and enter their
Username (tester2), Full name, and E-mail and select 'Register'.  However,
they are then prompted to Login.

The event.log snippet is below, and clearly indicates a permissions issue.
However, I'm not sure what permission is required or whether it should be
set in one of the states of member_approval_workflow or on one of the portal
folders used in Member creation.  So, I'm at the point of aimlessly
modifying different permissions.   Thanks for any help...

Regards,
Eric


------
2007-03-05T20:43:27 DEBUG Archetypes
^[[00m^[[01;32mProducts/Archetypes/Extensi\
bleMetadata.py[282]:allowDiscussion
^[[00mCatched Unauthorized on discussiontool.overrideDiscussionFor
(portal_membe\
rdata/portal_factory/Member/member.2007-03-05.6171660767)

------
2007-03-05T20:43:27 DEBUG Archetypes Catched Unauthorized on
discussiontool.ove\
rrideDiscussionFor(portal_memberdata/tester2)

------
2007-03-05T20:43:28 INFO Archetypes
^[[00m^[[01;32mProducts/Archetypes/Field.py[500]:writeable
^[[00mTried to update Member:title but field is not writeable.

------
2007-03-05T20:43:28 INFO Archetypes
^[[00m^[[01;32mProducts/Archetypes/Field.py[512]:writeable
^[[00mUser None tried to update Member:roles but doesn't have enough
permissions.

------
2007-03-05T20:43:28 INFO Archetypes User None tried to update Member:groups
but doesn't have enough permissions.

------
2007-03-05T20:43:28 INFO Archetypes User None tried to update Member:domains
but doesn't have enough permissions.

------
2007-03-05T20:43:28 INFO Archetypes
^[[00m^[[01;32mProducts/Archetypes/Field.py[500]:writeable

^[[00mTried to update Member:review_state but field is not writeable.

------
2007-03-05T20:43:28 INFO Archetypes Tried to update Member:listed but field
is not writeable.

------
2007-03-05T20:43:28 BLATHER Zope Security Policy Unauthorized: Your user
account does not have the required permission.  Access to 'hasUser' of
(Member at /carechurch/portal_memberdata/tester2) denied. Your user account,
Anonymous User, exists at /acl_users. Access requires one of the following
roles: ['Manager', 'Owner']. Your roles in this context are ['Anonymous'].
------
2007-03-05T20:43:28 BLATHER Zope Security Policy Unauthorized: Your user
account does not have the required permission.  Access to '' of (PloneSite
at /carechurch) denied. Your user account, Anonymous User, exists at
/acl_users. Access requires one of the following roles: ['Manager',
'Member', 'Reviewer']. Your roles in this context are ['Anonymous'].
------

2007-03-05T20:43:28 BLATHER Zope Security Policy Unauthorized: Your user
account does not have the required permission.  Access to 'aq_explicit' of
(MemberDataContainer at /carechurch/portal_memberdata) denied. Your user
account, Anonymous User, exists at /acl_users. Access requires one of the
following roles: ['Manager', 'Member', 'Reviewer']. Your roles in this
context are ['Anonymous'].
------

Return to date view: threaded or flat