Ticket #4449 (closed Bug: fixed)

Opened 7 years ago

Last modified 3 years ago

Access denied for "Private" files

Reported by: DrOMM Owned by:
Priority: major Milestone: 2.1.2
Component: Infrastructure Version:
Severity: Keywords:
Cc:

Description

I uploaded a MS Word Document as type "File". After setting the status to "Private", even the owner of the file is not able to access it any more. The error message is: "Insufficient Privileges".

Change History

comment:1 Changed 6 years ago by limi

Can somebody look into this and see if it's reproducible - and figure out why it's happening if it is?

comment:2 Changed 6 years ago by alecm

Cannot reproduce this. Please give more information about your setup (file location, customized workflows, etc.). Ideally we need a way to reproduce this bhavior when starting from a new plone instance.

comment:3 Changed 6 years ago by limi

Cannot reproduce, please add more details on how to reproduce.

comment:4 Changed 6 years ago by Anonymous User

I have set up a new clean Plone 2.1 RC 2 instance as follows:

Zope Version (Zope 2.8.1-final, python 2.3.5, linux2) Python Version 2.3.5 (#1, Jul 29 2005, 21:07:49) [GCC 3.3.4 (pre 3.3.5 20040809)] System Platform linux2 SOFTWARE_HOME /usr/local/zope2.8.1/lib/python ZOPE_HOME /usr/local/zope2.8.1 INSTANCE_HOME /home/plone/zope281 CLIENT_HOME /home/plone/zope281/var Network Services ZServer.HTTPServer.zhttp_server (Port: 9673) Process Id 4239 (1114049456)

The site is on www.mueller-michaels.net:9673/Test

I created a folder "Documents" and uploaded two MS Word files, Test-public and Test-private. When I switched the status of Test-private to "Private", the system showed me a user and password box; entering these would not help. After cancelling, the system has logged me out. When I log in again, I cannot access "Test-private". Everything works fine in Plone 2.0.5 with the same setup.

Pls. mail me on olaf@…, and I will give you access to my server (as user plone, ssh and ZMI).

comment:5 Changed 6 years ago by alecm

  • Status changed from new to closed
  • Resolution set to fixed

Fixed in plone svn. There was a direct attribute access going on in the template that zope 2.8 was not particularly fond of.

comment:6 Changed 3 years ago by hannosch

  • Component changed from Permissions to Infrastructure
Note: See TracTickets for help on using tickets.