Invalid Undo URL after renaming an object via the 'Properties' view

[jogilder]

If you modify the name for an object (eg document) on the properties tab there is an undo button. If you click on the undo button then you get a 404 error saying the resource cannot be found. The path looked for has the new 'name' for the object. When you look at the folder containing the object then the object hasn't been altered and is still there with the modified name. This happens for all content types.

[jogilder]

You can undo this transaction from the undo tab. The issue is that the wrong tid is passed to db.undo on line 62 of sdi/views/undo.py.

[tseaver]

The error I see here is:

404 Not Found
The resource could not be found.

predicate mismatch for view UndoViews (check_csrf = True) 

where the SubstanceD-generated URL for the @@undo_recent link contains a csrf_token=.... value in the query string, as generated here:

            csrf_token = request.session.get_csrf_token()
            query = {'csrf_token': csrf_token, 'undohash': hsh}
            url = self.mgmt_path(request.context, '@@undo_recent', query=query)

Passing a csrf_token in the URL query string is incompatible with more recent versions of Pyramid (i.e., >= 1.7).