It's probably a configuration error. Did you upgrade from a previous version of openacs? I had a similar problem when I upgraded, and it was due to my browser being cookied with an old security token, which was wiped out of the db when I upgraded. Restarting the browser fixed the problem.
