#202 — Filtering by an non-existing author id causes a TypeError

by Jan Hackel — last modified Jun 15, 2009 09:09 PM

State	Resolved
Version:	1.7
Area	Functionality
Issue type	Bug
Severity	Medium
Submitted by	Jan Hackel
Submitted on	Jun 12, 2009
Responsible	Jan Hackel
Target release:	1.7

Return to tracker

Tags:

TraversalIssue

Appending a string which does not denote a site user to the `authors` virtual URL of a weblog will cause a TypeError: unsubscriptable object in Module quills.app.topic, line 172 (getTitle). This happens because getTitle queries the full name of the member info object regardless whether it got a valid info or not.

See attachment for a full trace-back.

This is related to issue #198.

Steps to reproduce:: Create a blog, say http://localhost/plone/blog.
Navigate to the virtual URL for blog authors by appending `/authors` to the blog's URL. Append a some random text, which does not identify a system user, to that URL, e.g. http://localhost/plone/blog/authors/nobody.

Attached:

traceback.zip — ZIP archive, 1 kB (1181 bytes)

Added by Jan Hackel on Jun 12, 2009 12:35 PM

I had to zip the trace-back, because the new Plone-Site chokes on the pure text somehow.

Added by Jan Hackel on Jun 12, 2009 12:55 PM

This issue has been described in issue #197, though in an not reproducible way.

Added by Jan Hackel on Jun 12, 2009 09:13 PM

Issue state: Unconfirmed → Confirmed

Responsible manager: (UNASSIGNED) → jhackel

There is now a test-case at rev. 88118 (http://dev.plone.org/collective/changeset?88118).

Added by Jan Hackel on Jun 15, 2009 09:09 PM

Issue state: Confirmed → Resolved

Fixed at rev. 88258 (http://dev.plone.org/collective/changeset?88258). That also fixes issues #198.

No responses can be added.