Changeset b15ecc6

Timestamp:

Jul 8, 2012 7:42:55 AM (12 years ago)

Author:

Ted Faber <faber@…>

Branches:

compt_changes, master

Children:

25bf6cc

Parents:

2c36179

Message:

Deal with errors where no attribute will grant access

File:

• fedd/federation/access.py (modified) (1 diff)

fedd/federation/access.py

@@ -313 +313 @@
             # We only return one fail proof because returning hundreds (which
             # is easy to do) locks up the fault mechanism.
-            raise service_error(service_error.access, "Access denied",
+            if len(fail_proofs) == 0:
+                self.log.debug('No choices either: %s' % check)
+                raise service_error(service_error.access, 
+                        "Access denied - no way to grant requested access")
+            raise service_error(service_error.access, "Access denied",
                     proof=fail_proofs[0])