From e6ead3176c2132d38283dc404ae601506e278a34 Mon Sep 17 00:00:00 2001 From: Min Chen Date: Wed, 23 Jul 2014 17:36:15 -0700 Subject: [PATCH] CLOUDSTACK-7175:Domain Id is exposed in error message when cross domain access is attempted when listing Vms. --- server/src/com/cloud/acl/DomainChecker.java | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/server/src/com/cloud/acl/DomainChecker.java b/server/src/com/cloud/acl/DomainChecker.java index 729a0d1e2ab..a6bdce44936 100755 --- a/server/src/com/cloud/acl/DomainChecker.java +++ b/server/src/com/cloud/acl/DomainChecker.java @@ -80,10 +80,10 @@ public class DomainChecker extends AdapterBase implements SecurityChecker { if (_accountService.isNormalUser(caller.getId())) { if (caller.getDomainId() != domainId) { - throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getId()); + throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getUuid()); } } else if (!_domainDao.isChildDomain(caller.getDomainId(), domainId)) { - throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getId()); + throw new PermissionDeniedException(caller + " does not have permission to operate within domain id=" + domain.getUuid()); } return true;