Here is a patch with the proposed code fix and changes to the functional test. Note that in this case the non-admin tenant user:
- only sees the exception type class name for the fault message
- does not see details in the fault response
The admin user:
- only sees the exception type class name for the fault message
- sees the exception value (previously what they'd see in the fault message) and traceback in the fault details
WIP since I need to fix test fallout and add a release note once we have a CVE/OSSA.
Here is a patch with the proposed code fix and changes to the functional test. Note that in this case the non-admin tenant user:
- only sees the exception type class name for the fault message
- does not see details in the fault response
The admin user:
- only sees the exception type class name for the fault message
- sees the exception value (previously what they'd see in the fault message) and traceback in the fault details
WIP since I need to fix test fallout and add a release note once we have a CVE/OSSA.