diff options
author | Go MAEDA <maeda@farend.jp> | 2019-08-27 15:42:05 +0000 |
---|---|---|
committer | Go MAEDA <maeda@farend.jp> | 2019-08-27 15:42:05 +0000 |
commit | e9d74c01d0a9650e2a58aaaa48ebb52d8e69847c (patch) | |
tree | dc6cfba6d5e8ee700b466949531a9432dc94defa | |
parent | 217bf4602993380dd032534f8b6be158f50b0dd4 (diff) | |
download | redmine-e9d74c01d0a9650e2a58aaaa48ebb52d8e69847c.tar.gz redmine-e9d74c01d0a9650e2a58aaaa48ebb52d8e69847c.zip |
Improve MailHandler logging for unauthorized attempts (#31899).
Patch by Gustavo Regal.
git-svn-id: http://svn.redmine.org/redmine/trunk@18404 e93f8b46-1217-0410-a6f0-8f06a7374b81
-rwxr-xr-x | app/models/mail_handler.rb | 8 |
1 files changed, 4 insertions, 4 deletions
diff --git a/app/models/mail_handler.rb b/app/models/mail_handler.rb index f0f0f41b1..045424ffb 100755 --- a/app/models/mail_handler.rb +++ b/app/models/mail_handler.rb @@ -171,7 +171,7 @@ class MailHandler < ActionMailer::Base logger&.error "MailHandler: missing information from #{user}: #{e.message}" false rescue UnauthorizedAction => e - logger&.error "MailHandler: unauthorized attempt from #{user}" + logger&.error "MailHandler: unauthorized attempt from #{user}: #{e.message}" false end @@ -184,7 +184,7 @@ class MailHandler < ActionMailer::Base project = target_project # check permission unless handler_options[:no_permission_check] - raise UnauthorizedAction unless user.allowed_to?(:add_issues, project) + raise UnauthorizedAction, "not allowed to add issues to project [#{project.name}]" unless user.allowed_to?(:add_issues, project) end issue = Issue.new(:author => user, :project => project) @@ -223,7 +223,7 @@ class MailHandler < ActionMailer::Base unless handler_options[:no_permission_check] unless user.allowed_to?(:add_issue_notes, issue.project) || user.allowed_to?(:edit_issues, issue.project) - raise UnauthorizedAction + raise UnauthorizedAction, "not allowed to add notes on issues to project [#{project.name}]" end end @@ -262,7 +262,7 @@ class MailHandler < ActionMailer::Base message = message.root unless handler_options[:no_permission_check] - raise UnauthorizedAction unless user.allowed_to?(:add_messages, message.project) + raise UnauthorizedAction, "not allowed to add messages to project [#{project.name}]" unless user.allowed_to?(:add_messages, message.project) end if !message.locked? |