Recent code changes did not consider that only the keys of the request
object itself got validated. The validiation function now got feeded with
some additional keys, e.g effective_attributes, didn't accept these keys
and returned an "Invalid request" as result.
This has been fixed.
To the list of all Werks