summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorGo MAEDA <maeda@farend.jp>2019-08-27 15:42:05 +0000
committerGo MAEDA <maeda@farend.jp>2019-08-27 15:42:05 +0000
commite9d74c01d0a9650e2a58aaaa48ebb52d8e69847c (patch)
treedc6cfba6d5e8ee700b466949531a9432dc94defa
parent217bf4602993380dd032534f8b6be158f50b0dd4 (diff)
downloadredmine-e9d74c01d0a9650e2a58aaaa48ebb52d8e69847c.tar.gz
redmine-e9d74c01d0a9650e2a58aaaa48ebb52d8e69847c.zip
Improve MailHandler logging for unauthorized attempts (#31899).
Patch by Gustavo Regal. git-svn-id: http://svn.redmine.org/redmine/trunk@18404 e93f8b46-1217-0410-a6f0-8f06a7374b81
-rwxr-xr-xapp/models/mail_handler.rb8
1 files changed, 4 insertions, 4 deletions
diff --git a/app/models/mail_handler.rb b/app/models/mail_handler.rb
index f0f0f41b1..045424ffb 100755
--- a/app/models/mail_handler.rb
+++ b/app/models/mail_handler.rb
@@ -171,7 +171,7 @@ class MailHandler < ActionMailer::Base
logger&.error "MailHandler: missing information from #{user}: #{e.message}"
false
rescue UnauthorizedAction => e
- logger&.error "MailHandler: unauthorized attempt from #{user}"
+ logger&.error "MailHandler: unauthorized attempt from #{user}: #{e.message}"
false
end
@@ -184,7 +184,7 @@ class MailHandler < ActionMailer::Base
project = target_project
# check permission
unless handler_options[:no_permission_check]
- raise UnauthorizedAction unless user.allowed_to?(:add_issues, project)
+ raise UnauthorizedAction, "not allowed to add issues to project [#{project.name}]" unless user.allowed_to?(:add_issues, project)
end
issue = Issue.new(:author => user, :project => project)
@@ -223,7 +223,7 @@ class MailHandler < ActionMailer::Base
unless handler_options[:no_permission_check]
unless user.allowed_to?(:add_issue_notes, issue.project) ||
user.allowed_to?(:edit_issues, issue.project)
- raise UnauthorizedAction
+ raise UnauthorizedAction, "not allowed to add notes on issues to project [#{project.name}]"
end
end
@@ -262,7 +262,7 @@ class MailHandler < ActionMailer::Base
message = message.root
unless handler_options[:no_permission_check]
- raise UnauthorizedAction unless user.allowed_to?(:add_messages, message.project)
+ raise UnauthorizedAction, "not allowed to add messages to project [#{project.name}]" unless user.allowed_to?(:add_messages, message.project)
end
if !message.locked?