opensource/cloudpods
3
0
Fork 0
mirror of https://github.com/yunionio/cloudpods.git synced 2026-09-24 16:03:43 +08:00
Code Issues Packages Projects Releases Wiki Activity

fix: more detailed privilege hint (#13975)

Browse Source 
Co-authored-by: Qiu Jian <qiujian@yunionyun.com>
This commit is contained in:
Jian Qiu
2022-04-12 12:09:18 +08:00
committed by GitHub
co-authored by Qiu Jian
parent ad811a43b2
commit ef2b3cd7fc
1 changed files with 3 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files
pkg/cloudcommon/db/fetch.go
+3 -2
View File
@@ -387,8 +387,9 @@ func FetchCheckQueryOwnerScope(
requireScope = queryScope
}
if doCheckRbac && (requireScope.HigherThan(allowScope) || policyTagFilters.Result.IsDeny()) {
return nil, scope, httperrors.NewForbiddenError("not enough privilege to dp %s (require:%s,allow:%s,query:%s)",
action, requireScope, allowScope, queryScope), policyTagFilters
return nil, scope, httperrors.NewForbiddenError("not enough privilege to do %s:%s:%s (require:%s,allow:%s,query:%s)",
consts.GetServiceType(), manager.KeywordPlural(), action,
requireScope, allowScope, queryScope), policyTagFilters
}
return ownerId, queryScope, nil, policyTagFilters
}