Changing the Container of a verified AR raises an Unauthorized Error

[ramonski]

Steps to reproduce

• Create a new AR and verify the results
• Change the container of the AR View

Current behavior

Unauthorized Error occurs (not always).
It seems like it happens when the Container wasn't set and then set to a value.
Sometimes a few changes work and then the error occurs, which might be an indication of a race condition.

The Traceback shows this:

Traceback (innermost last):
  Module ZPublisher.Publish, line 127, in publish
  Module ZPublisher.BaseRequest, line 623, in traverse
  Module ZPublisher.HTTPResponse, line 756, in unauthorized
Unauthorized: You are not authorized to access this resource.
No Authorization header found.

Which might be an indicator that code is executed somewhere in __init__, because the user and ZCA is no ready at this stage of execution.

Expected behavior

Either the selection is not displayed or it should not raise an unauthorized Error

Screenshot (optional)

[ramonski]

Seems like the error only happens if the checkbox was not checked before clicking the submit button.