Return an error when trying to access the pas views from the web

news/94.bugfix.rst

@@ -0,0 +1 @@
+Return an error when trying to access the pas views from the web [ale-rt]

src/Products/PlonePAS/browser/configure.zcml

@@ -14,23 +14,20 @@
       name="pas_info"
       for="*"
       class=".info.PASInfoView"
-      allowed_interface="Products.PlonePAS.interfaces.browser.IPASInfoView"
       permission="zope2.View"
       />
 
   <browser:page
       name="pas_member"
       for="*"
       class=".member.PASMemberView"
-      allowed_interface="Products.PlonePAS.interfaces.browser.IPASMemberView"
       permission="zope2.View"
       />
 
   <browser:page
       name="pas_search"
       for="*"
       class=".search.PASSearchView"
-      allowed_interface="Products.PlonePAS.interfaces.browser.IPASSearchView"
       permission="zope2.View"
       />
 

src/Products/PlonePAS/browser/info.py

@@ -7,6 +7,7 @@
 from Products.PluggableAuthService.interfaces.plugins import (  # noqa: E501
     ILoginPasswordExtractionPlugin,
 )
+from zExceptions import HTTPImATeapot
 from zope.interface import implementer
 
 
@@ -38,3 +39,6 @@ def hasOpenIDExtractor(self):
     def hasOpenIDdExtractor(self):
         # BBB Keeping method name with typo for backwards compatibility.
         return self.hasOpenIDExtractor()
+
+    def __call__(self):
+        raise HTTPImATeapot("View not callable")

src/Products/PlonePAS/browser/member.py

@@ -1,6 +1,7 @@
 from plone.memoize.instance import memoize
 from Products.CMFCore.utils import getToolByName
 from Products.PlonePAS.interfaces.browser import IPASMemberView
+from zExceptions import HTTPImATeapot
 from zope.interface import implementer
 from zope.publisher.browser import BrowserView
 
@@ -26,3 +27,6 @@ def info(self, userid=None):
             result.get("fullname") or result.get("username") or userid
         )
         return result
+
+    def __call__(self):
+        raise HTTPImATeapot("View not callable")

src/Products/PlonePAS/browser/search.py

@@ -2,6 +2,7 @@
 from Products.CMFCore.utils import getToolByName
 from Products.Five import BrowserView
 from Products.PlonePAS.interfaces.browser import IPASSearchView
+from zExceptions import HTTPImATeapot
 from zope.component import queryUtility
 from zope.interface import implementer
 
@@ -73,3 +74,6 @@ def getPhysicalPath(self):
         # persistent object. So we fake things and return the physical path
         # for our context.
         return self.context.getPhysicalPath()
+
+    def __call__(self):
+        raise HTTPImATeapot("View not callable")