From 7416358e95e69a517424319ac31dfcc68bda2878 Mon Sep 17 00:00:00 2001

From: Fraser Tweedale <ftweedal@redhat.com>

Date: Sun, 9 Aug 2015 01:54:41 -0400

Subject: [PATCH] Give more info on virtual command access denial

The current error message upon a virutal command access denial does

not give any information about the virtual operation that was

prohibited.  Add more information to the ACIError message.

Reviewed-By: Martin Babinsky <mbabinsk@redhat.com>

---

 ipalib/plugins/virtual.py | 2 +-

 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/ipalib/plugins/virtual.py b/ipalib/plugins/virtual.py

index 414de4c0011b4ae49083d7820a3cb3708e3e16b1..3bbe32e538ab108d7abc71785e27664fea5ea248 100644

--- a/ipalib/plugins/virtual.py

+++ b/ipalib/plugins/virtual.py

@@ -62,7 +62,7 @@ class VirtualCommand(Command):

         try:

             if not ldap.can_write(operationdn, "objectclass"):

                 raise errors.ACIError(

-                    info=_('not allowed to perform this command'))

+                    info=_('not allowed to perform operation: %s') % operation)

         except errors.NotFound:

             raise errors.ACIError(info=_('No such virtual command'))

-- 

2.4.3