• Remember Mailing List

Re: Custom member type creation raises Unauthorized??

from Rob Miller on Jul 05, 2007 07:05 PM
Peter Fraterdeus wrote:
> Just trying to track down an answer or a hint of a path to a solution for the following:
> 
> Why would a custom member type generated with AGX, and following the remember
> documentation on custom schema, raise an Unauthorized exception?
> 
> That is, when we set the Default Member type to our 'CustomPerson', the "join" link raises Unauthorized, and shows a login form.
> 
> Traceback here: http://paste.plone.org/15584
> 
> VerboseSecurity isn't very telling. 

yes, the unauth errors on content creation that CMF raises are not very 
helpful.  to really understand what's going on, you have to step into the 
getSecurityManager().validate() call on link 538 of 
Products.CMFCore.TypesTool.  :(

> We've made 'CustomPerson' addable to MemberDataContainer in portal_types.

what is the add permission on your CustomPerson type, and who has this 
permission?  remember sets the add permission on its member type to be "Add 
portal member", which is given to Anonymous by default.  this is not the case 
with most content types, so maybe AGX is creating a custom add permission, or 
is using "Add portal content".

if it's a custom permission, you should be able to tweak the roles on that 
permission and you'll be fine.  if it's not, then you'll have to figure out 
how to reassign it to a different add permission, probably "Add portal member".

-r
Return to date view: threaded or flat