Submitted by : simon at: 2006-08-14T14:55:13+00:00 (11 years ago)
Name :
Category : Severity : Status :
Optional subject :  
Optional comment :

BritOnTour reported a file upload field that would not respect the permissions configured on the wiki folder. I've reproduced this, it seems to happen only in a subfolder of a plone site, in which case the editform template erroneously thinks "container" is the plone site. A similar acquisition context problem was resolved earlier this year; it looks as if more is needed.

more --simon, Mon, 14 Aug 2006 16:44:40 -0700 reply

This is the same issue as #1220. That case was fixed in addSkinTo, this one is handled by getSkinTemplate (the two places where Zwiki invokes page templates). We try to ensure that "container" in zwiki skin templates always refers to the folder of the current page. But when the skin template comes from the zodb it has an aq_inner which in plone seems to be hard-coded to the plone root; and zope calculates container based on this.

I'll have to either finagle container in some way, or instead have templates use here.folder() (which always works) and document that container may refer to the plone site root sometimes. Retest #1220 with zodb-based templates just to check.

... --simon, Sat, 26 Aug 2006 07:58:38 -0700 reply

How annoying.

more - file upload for members... --finrod, Wed, 27 Sep 2006 11:07:04 -0700 reply

I am seeing this problem on Plone 2.5 Zwiki 0.56. Has this been resolved or is there a workaround? Basicly I have a z-wiki in a subfolder off the main site root and only people with "manager" role can see the file upload box. Any help would be great.

finrod

... --simon, Sun, 04 Feb 2007 13:51:38 -0800 reply

Severity: normal => serious

is there any intention to fix this bug? --rustyw007, Tue, 09 Oct 2007 13:26:50 -0700 reply

just wondering if there was any intention of fixing this? It kinds makes my whole use of the wiki pointless as my intended use was to have certain sub-folders that "authenticated" (and other non-manager) users could upload to.