Improve multi-authorizer errors

This commit is contained in:
Jordan Liggitt
2018-07-06 10:55:17 -04:00
parent 91b729342d
commit 1c012f1c49
2 changed files with 3 additions and 1 deletions

View File

@@ -121,6 +121,8 @@ func (r *RBACAuthorizer) Authorize(requestAttributes authorizer.Attributes) (aut
reason := ""
if len(ruleCheckingVisitor.errors) > 0 {
reason = fmt.Sprintf("RBAC: %v", utilerrors.NewAggregate(ruleCheckingVisitor.errors))
} else {
reason = "no RBAC policy matched"
}
return authorizer.DecisionNoOpinion, reason, nil
}