diff --git a/src/mra.py b/src/mra.py
index 3e0229623f34f41cbf137719223f4a59f01379db..fab07cad365d128732224c98e052fe1cb172c166 100644
--- a/src/mra.py
+++ b/src/mra.py
@@ -994,7 +994,9 @@ class MRA(object):
         # full_path = os.path.realpath(os.path.join(root, *args))
         full_path = os.path.join(root, *args)
         if not full_path.startswith(os.path.realpath(root)):
-            raise webapp.Forbidden("Path \"%s\" outside root directory." % full_path)
+            message = "Path \"%s\" outside root directory." % full_path
+            logging.warning(message)
+            raise webapp.Forbidden(message)
         return full_path
 
     def mk_path(self, path):