IntenseWebs/freeipa
3
0
Fork 0
mirror of https://salsa.debian.org/freeipa-team/freeipa.git synced 2025-01-11 16:51:55 -06:00
Code Issues Packages Projects Releases Wiki Activity

Raise a more specific error when a user lacks the proper permissions.

Browse Source 
The info part of the message will contain details on what permission
failed on what attribute.
This commit is contained in:
Rob Crittenden 2009-03-23 15:09:54 -04:00
parent 65e6259075
commit 233a4cb5fd
3 changed files with 6 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
ipalib/errors.py
View File

@ -396,10 +396,6 @@ class DefaultGroup(ConfigurationError):
"""You cannot remove the default users group""" """You cannot remove the default users group"""
faultCode = 1025 faultCode = 1025
class InsufficientAccess(GenericError):
"""You do not have permission to perform this task"""
faultCode = 1027
class InvalidUserPrincipal(GenericError): class InvalidUserPrincipal(GenericError):
"""Invalid user principal""" """Invalid user principal"""
faultCode = 1028 faultCode = 1028

1
ipalib/errors2.py
View File

@ -475,6 +475,7 @@ class ACIError(AuthorizationError):
""" """
errno = 2100 errno = 2100
format = _('Insufficient access: %(info)r')

6
ipaserver/ipaldap.py
View File

@ -387,6 +387,8 @@ class IPAdmin(SimpleLDAPObject):
raise errors2.DuplicateEntry raise errors2.DuplicateEntry
else: else:
raise errors.DatabaseError, e raise errors.DatabaseError, e
except ldap.INSUFFICIENT_ACCESS, e:
raise errors2.ACIError(info=e.args[0].get('info',''))
except ldap.LDAPError, e: except ldap.LDAPError, e:
raise errors.DatabaseError, e raise errors.DatabaseError, e
return True return True
@ -428,6 +430,8 @@ class IPAdmin(SimpleLDAPObject):
# update, making the oldentry stale. # update, making the oldentry stale.
except ldap.NO_SUCH_ATTRIBUTE: except ldap.NO_SUCH_ATTRIBUTE:
raise errors.MidairCollision raise errors.MidairCollision
except ldap.INSUFFICIENT_ACCESS, e:
raise errors2.ACIError(info=e.args[0].get('info',''))
except ldap.LDAPError, e: except ldap.LDAPError, e:
raise errors.DatabaseError, e raise errors.DatabaseError, e
return True return True
@ -500,7 +504,7 @@ class IPAdmin(SimpleLDAPObject):
self.set_option(ldap.OPT_SERVER_CONTROLS, sctrl) self.set_option(ldap.OPT_SERVER_CONTROLS, sctrl)
self.delete_s(*args) self.delete_s(*args)
except ldap.INSUFFICIENT_ACCESS, e: except ldap.INSUFFICIENT_ACCESS, e:
raise errors.InsufficientAccess, e raise errors2.ACIError(info=e.args[0].get('info',''))
except ldap.LDAPError, e: except ldap.LDAPError, e:
raise errors.DatabaseError, e raise errors.DatabaseError, e
return True return True