Unauthorized: You are not allowed to access 'xxx.yyy' in this context

When creating a new item the user cannot get to the initial edit page

You are trying to set-up a Plone site where authenticated users can create and submit content. You have set-up "Add portal content" and "Add XXX content type" permissions for your Authenticated/Member users. Still, users cannot add the content but get the following exception when trying creating an item:


Module ZPublisher.Publish, line 113, in publish
Module ZPublisher.mapply, line 88, in mapply
Module ZPublisher.Publish, line 40, in call_object
Module Products.CMFFormController.FSControllerPythonScript, line 109, in __call__
Module Products.CMFFormController.Script, line 141, in __call__
Module Products.CMFCore.FSPythonScript, line 108, in __call__
Module Shared.DC.Scripts.Bindings, line 311, in __call__
Module Shared.DC.Scripts.Bindings, line 348, in _bindAndExec
Module Products.CMFCore.FSPythonScript, line 164, in _exec
Module None, line 19, in createObject
<FSControllerPythonScript at /imc/createObject used for /imc/test> Line 19
Unauthorized: You are not allowed to access 'howtopage.2007-03-22.2921481349' in this context

Solution

You need to modify the workflow of the item. Your initial state probably gives edit/access permission to owner/manager only. Try adding access/modify permissions to Authenticated or Member users too.

Another solution

Posted by Riccardo Lemmi at Aug 21, 2008 08:00 AM
The owner should have the access/modify permissions (in the standard workflows) and if you
give these permissions to Authenticated or Member roles you permit to users to edit all contents.

In some cases the problem raises from the removal of a user that had customized a view template (or a script), so the template is owned by non-existent user and this is equivalent to an anonymous user. Taking the ownership of this template with a manager user resolves the problem.