event no thumbnail rza 500 error

[protonpopsicle]

something off with creating events in rza and not uploading a thumbnail causes this:

Traceback (most recent call last):

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/core/handlers/base.py", line 115, in get_response
response = callback(request, _callback_args, *_callback_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/contrib/admin/options.py", line 372, in wrapper
return self.admin_site.admin_view(view)(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/utils/decorators.py", line 91, in _wrapped_view
response = view_func(request, _args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/views/decorators/cache.py", line 89, in _wrapped_view_func
response = view_func(request, _args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/contrib/admin/sites.py", line 202, in inner
return view(request, _args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/utils/decorators.py", line 25, in _wrapper
return bound_func(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/utils/decorators.py", line 91, in _wrapped_view
response = view_func(request, _args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/utils/decorators.py", line 21, in bound_func
return func(self, _args2, *_kwargs2)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/transaction.py", line 223, in inner
return func(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/contrib/admin/options.py", line 1105, in change_view
self.save_model(request, new_object, form, True)

File "/sites/rhizome.org/programs/admin.py", line 24, in save_model
obj.save()

File "/sites/rhizome.org/programs/models.py", line 106, in save
super(RhizEvent, self).save(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 546, in save
force_update=force_update, update_fields=update_fields)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 664, in save_base
update_fields=update_fields, raw=raw, using=using)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/dispatch/dispatcher.py", line 170, in send
response = receiver(signal=self, sender=sender, **named)

File "/sites/rhizome.org/programs/models.py", line 133, in on_rhizevent_save
instance.save()

File "/sites/rhizome.org/programs/models.py", line 106, in save
super(RhizEvent, self).save(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 546, in save
force_update=force_update, update_fields=update_fields)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 664, in save_base
update_fields=update_fields, raw=raw, using=using)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/dispatch/dispatcher.py", line 170, in send
response = receiver(signal=self, sender=sender, **named)

File "/sites/rhizome.org/programs/models.py", line 133, in on_rhizevent_save
instance.save()

File "/sites/rhizome.org/programs/models.py", line 106, in save
super(RhizEvent, self).save(_args, *_kwargs)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 546, in save
force_update=force_update, update_fields=update_fields)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/base.py", line 624, in save_base
values = [(f, None, (raw and getattr(self, f.attname) or f.pre_save(self, False))) for f in non_pks]

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/fields/files.py", line 250, in pre_save
file.save(file.name, file, save=False)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/db/models/fields/files.py", line 86, in save
self.name = self.storage.save(name, content)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/core/files/storage.py", line 47, in save
name = self.get_available_name(name)

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/core/files/storage.py", line 73, in get_available_name
while self.exists(name):

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/core/files/storage.py", line 243, in exists
return os.path.exists(self.path(name))

File "/sites/rhizome.org/venv/local/lib/python2.7/site-packages/django/core/files/storage.py", line 259, in path
raise SuspiciousOperation("Attempted access to '%s' denied." % name)

SuspiciousOperation: Attempted access to '/sites/rhizome_thumbnail.jpg' denied.

<WSGIRequest
path:/rza/programs/rhizevent/107/,
GET:<QueryDict: {}>,
POST:<QueryDict: {u'location_locality_province': [u''], u'curator': [u''], u'start_date_0': [u'2014-06-19'], u'start_date_1': [u'19:00:00'], u'_continue': [u'Save and continue editing'], u'location_url': [u'http://www.newmuseum.org/'], u'location_city': [u'New York'], u'location_country': [u'US'], u'title': [u'Internet Subjects: #Uberwar and the "Sharing" Economy'], u'location_street2': [u''], u'location_street1': [u'235 Bowery'], u'curator_other': [u''], u'csrfmiddlewaretoken': [u'CDr52kB5V5PMapYZeyYzwmfTBrluyMNG'], u'thumbnail': [u''], u'tickets_link': [u''], u'at_new_museum': [u'on'], u'curator_other_link': [u''], u'description': [u'Internet Subjects is a new series of flash panel conversations. Each takes a topic chosen just a week in advance in order to discuss emerging internet subjects and subjectivities in an engaging public forum. \r\n

\r\nThis first event will focus on the social and political ramifications of the so-called "sharing" economy. There is a protest
by taxi drivers happening today in cities around Europe against Uber\u2014an #Uberwar in the wake of last week's $18.2 billion valuation. Airbnb, recently involved in a drawn-out dispute with New York's Attorney General, was the subject of an unauthorized 'AirBnB Pavillion' at the 14th Venice Architecture Biennale last weekend. In a relatively short period of time, such services generate new infrastructures outside of traditional social processes, thereby expanding markets, and the market logic itself, into previously untapped spaces. But they also challenge existing notions of labor organization, risk and domestic/private space. Is "sharing" the most accurate term for this economic process? \r\n

\r\nJoin panelists Denise Cheng (MIT Center for Civic Media), Rob Horning (The New Inquiry), writer Kate Losse, and Melissa S. Fisher (Social & Cultural Analysis, NYU) as they discuss the "sharing" economy, its implications and its horizons.'], u'thumbnail-clear': [u'on'], u
'location_title': [u'the New Museum'], u'slug': [u'internet-subjects-uberwar'], u'zip_postal_code': [u'10002'], u'location_state': [u'New York'], u'allow_comments': [u'on'], u'end_date_1': [u'21:00:00'], u'end_date_0': [u'2014-06-19'], u'url': [u''], u'medium_image-clear': [u'on'], u'summary': [u'Internet Subjects is a new series of flash panel conversations. Each takes a topic chosen just a week in advance in order to discuss emerging internet subjects and subjectivities in an engaging public forum. \r\n'], u'medium_image': [u''], u'media_link': [u'']}>,
COOKIES:{'__qca': 'P0-755058285-1380735973879',
'__utma': '115082436.746856173.1380728644.1401892203.1401895309.176',
'__utmc': '115082436',
'__utmz': '115082436.1400097350.171.40.utmcsr=karialtmann.com|utmccn=(referral)|utmcmd=referral|utmcct=/info/index.html',
'_cb_cp': 'CRHTYSBqz0bnDS-U9NKVcCzq_6W8',
'_cb_ls': '1',
'_chartbeat2': 'zfxe1lu42pjz3m08.1389302702087.1402521805985.1111001110000101',
'_chartbeat4': 't=CRHTYSBqz0bnDS-U9NKVcCzq_6W8&E=5&x=476&c=7.69&y=2025&w=805',
'chartbeat_uuniq': '3',
'ga': 'GA1.2.746856173.1380728644',
'csrftoken': 'CDr52kB5V5PMapYZeyYzwmfTBrluyMNG',
'sessionid': 'xphh642ix2ttrpnhd023jd55lw3zopy6'},
META:{'CONTENT_LENGTH': '376602',
'CONTENT_TYPE': 'multipart/form-data; boundary=----WebKitFormBoundary7kbJMHunxUYmYaAb',
u'CSRF_COOKIE': u'CDr52kB5V5PMapYZeyYzwmfTBrluyMNG',
'DOCUMENT_ROOT': '/etc/nginx/html',
'HOST': 'rhizome.org',
'HTTP_ACCEPT': 'text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,/;q=0.8',
'HTTP_ACCEPT_ENCODING': 'gzip,deflate,sdch',
'HTTP_ACCEPT_LANGUAGE': 'en-US,en;q=0.8',
'HTTP_AUTHORIZATION': 'Basic emVucHJpc206Y2FzYWZsb3BFWHBlcnQ2N2RlZ3M=',
'HTTP_CACHE_CONTROL': 'max-age=0',
'HTTP_CONNECTION': 'keep-alive',
'HTTP_CONTENT_LENGTH': '376602',
'HTTP_CONTENT_TYPE': 'multipart/form-data; boundary=----WebKitFormBoundary7kbJMHunxUYmYaAb',
'HTTP_COOKIE': '__qca=P0-755058285-1380735973879; _cb_ls=1; sessionid=xphh642ix2ttrpnhd023jd55lw3zopy6; __utma=115082436.746856173.1380728644.1401892203.1401895309.176; __utmc=115082436; __utmz=115082436.1400097350.171.40.utmcsr=karialtmann.com|utmccn=(referral)|utmcmd=referral|utmcct=/info/index.html; Domain=.rhizome.org; _ga=GA1.2.746856173.1380728644; _chartbeat2=zfxe1lu42pjz3m08.1389302702087.1402521805985.1111001110000101; _chartbeat_uuniq=3; _cb_cp=CRHTYSBqz0bnDS-U9NKVcCzq_6W8; _chartbeat4=t=CRHTYSBqz0bnDS-U9NKVcCzq_6W8&E=5&x=476&c=7.69&y=2025&w=805; csrftoken=CDr52kB5V5PMapYZeyYzwmfTBrluyMNG',
'HTTP_HOST': 'rhizome.org',
'HTTP_ORIGIN': 'https://rhizome.org',
'HTTP_REFERER': 'https://rhizome.org/rza/programs/rhizevent/107/',
'HTTP_USER_AGENT': 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_0) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.114 Safari/537.36',
'HTTP_X_FORWARDED_PROTOCOL': 'https',
'PATH_INFO': u'/rza/programs/rhizevent/107/',
'QUERY_STRING': '',
'REMOTE_ADDR': '50.75.236.242',
'REMOTE_PORT': '29322',
'REQUEST_METHOD': 'POST',
'REQUEST_URI': '/rza/programs/rhizevent/107/',
u'SCRIPT_NAME': u'',
'SERVER_NAME': 'rhizome.org',
'SERVER_PORT': '443',
'SERVER_PROTOCOL': 'HTTP/1.1',
'X-FORWARDED-FOR': '50.75.236.242',
'X-REAL-IP': '50.75.236.242',
'uwsgi.node': 'production',
'uwsgi.version': '1.0.3-debian',
'wsgi.errors': <open file 'wsgi_errors', mode 'w' at 0x418ef60>,
'wsgi.file_wrapper': ,
'wsgi.input': <open file 'wsgi_input', mode 'r' at 0x418eb70>,
'wsgi.multiprocess': True,
'wsgi.multithread': False,
'wsgi.run_once': False,
'wsgi.url_scheme': 'http',
'wsgi.version': (1, 0)}>