Skip to content
  • Jason Yellick's avatar
    FAB-14094 Clarify implicitmeta error message · 00df45f9
    Jason Yellick authored
    
    
    This CR replaces the old rather opaque and unclear:
    
     Failed to reach implicit threshold of 1 sub-policies: required 1 \
      remaining
    
    with
    
     implicit policy evaluation failed - 0 sub-policies were satisfied, \
      but this policy requires 1 of the 'Readers' sub-policies to be \
      satisfied
    
    Although the message is a bit verbose, and likely could be made to be
    even clearer, this attempts to strike a reasonable balance between
    verbosity, and information leakage about policy structures to users
    which are unauthorized and might simply be attempting to probe the
    system for information on membership, etc.
    
    Change-Id: Icd53e4438117936ca7254d08040e9fad27e24163
    Signed-off-by: default avatarJason Yellick <jyellick@us.ibm.com>
    00df45f9