The update script (dbupdate-6.7.0-to-6.8.0.sql) create "content/publish" policy limitations based on existing "content/create" and "content/edit" policies.

The problem is that some limitations are not avalaible on "content/publish" : ParentOwner, ParentGroup, ParentClass, ParentDepth.

This will result in an unauthorized exception when you try to publish a content.

Exemple :

• Create a role with content/create "Class" article under "Parent Class" folder
• The update script will add content/publish "Class" article under "Parent Class" folder