From 30844541d55b302b06bd85f12d8cf0193e7e4240 Mon Sep 17 00:00:00 2001 From: Cao Shufeng Date: Thu, 6 Apr 2017 01:00:40 -0400 Subject: [PATCH] Fix empty RBAC Forbidden message --- .../pkg/endpoints/handlers/responsewriters/errors.go | 4 ++++ 1 file changed, 4 insertions(+) diff --git a/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go b/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go index 9d560679b85..b3b964da699 100644 --- a/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go +++ b/staging/src/k8s.io/apiserver/pkg/endpoints/handlers/responsewriters/errors.go @@ -52,6 +52,10 @@ func forbiddenMessage(attributes authorizer.Attributes) string { username = user.GetName() } + if !attributes.IsResourceRequest() { + return fmt.Sprintf("User %q cannot %s path %q.", username, attributes.GetVerb(), attributes.GetPath()) + } + resource := attributes.GetResource() if group := attributes.GetAPIGroup(); len(group) > 0 { resource = resource + "." + group