etan39
/
cloudstack
mirror of https://github.com/apache/cloudstack.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

CLOUDSTACK-7175:Domain Id is exposed in error message when cross domain 

access is attempted when listing Vms.
This commit is contained in:
Min Chen 2014-07-23 17:36:15 -07:00
parent 351cc829e3
commit e6ead3176c
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
server/src/com/cloud/acl/DomainChecker.java
View File

@ -80,10 +80,10 @@ public class DomainChecker extends AdapterBase implements SecurityChecker {
if (_accountService.isNormalUser(caller.getId())) {
if (caller.getDomainId() != domainId) {
throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getId());
throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getUuid());
}
} else if (!_domainDao.isChildDomain(caller.getDomainId(), domainId)) {
throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getId());
throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getUuid());
}
return true;