Submitted by : 127.0.0.1 at: 2004-11-26T01:07:45+00:00 (13 years ago)
Name :
Category : Severity : Status :
Optional subject :  
Optional comment :

The line:

<dtml-let here="objectValues(spec=ZWiki Page)[0]?"

...fails if your ZWiki isn't anonymously viewable. This is because the standard_error_message is always executed in the context of the anonymous user. This is arguably a Zope bug (WHY is standard_error_message only ever executed in the context of the anonymous user? ;-) but, knowing this, it's a ZWiki bug to not handle this properly..

PS: You REALLY don't want to execute DTML in these pages, do you?!


comments:

thanks --simon, Sun, 28 Nov 2004 02:25:23 -0800 reply
That was pretty timely, I was just trying to find this. What should we do ? Catch with dtml-try/except and show something harmless ? Which pages don't I want DTML in ?

superseded by #1117 --simon, Tue, 20 Sep 2005 06:26:09 -0700 reply
Category: general => user-browsing Status: open => closed