#3836 ticket API raises 500 instead of 404 (NoneType' object has no attribute 'acl')
URL: /rest/p/allura/tickets/3881/?oauth_body_hash......
This ticket doesn't exist, but raises a 500 instead of 404
Module allura.lib.security:307 in require_access
<< def require_access(obj, permission, **kwargs):
predicate = has_access(obj, permission, **kwargs)
return require(predicate, message='%s access required' % permission.capitalize())
def require_authenticated():
>> return require(predicate, message='%s access required' % permission.capitalize())
Module allura.lib.security:294 in require
<< from allura import model as M
if predicate(): return
if not message:
message = """You don't have permission to do that.
>> if predicate(): return
Module allura.lib.utils:338 in __call__
<< self.callable = callable
def __call__(self, *args, **kw):
return self.callable(*args, **kw)
def __nonzero__(self):
return self.callable()
>> return self.callable(*args, **kw)
Module allura.lib.security:258 in predicate
<< chainable_roles = []
for rid in roles:
for ace in obj.acl:
if M.ACE.match(ace, rid, permission):
if ace.access == M.ACE.ALLOW:
>> for ace in obj.acl:
AttributeError: 'NoneType' object has no attribute 'acl'
Another url with (what Dave says) is a related error: https://sourceforge.net/u/rick446/profile/
Diff:
Diff:
On allura js/3836. To test, go to a url like /rest/p/test/tickets/3000 and make sure you get a 404. 3000 should be an invalid ticket number in a valid ticket tool.
Merged to dev.