From 4f4baf136b3ea3ab67093f9b0a9ab8e2b7736bf2 Mon Sep 17 00:00:00 2001
From: Mafoo <mafoo@users.noreply.github.com>
Date: Sat, 10 Jun 2017 03:03:22 +0100
Subject: [PATCH] Enhance - better reasons for 403 in orm class (#2659)

update return message when code 403 to also state the permission that failed
---
 resources/classes/orm.php | 10 +++++-----
 1 file changed, 5 insertions(+), 5 deletions(-)

diff --git a/resources/classes/orm.php b/resources/classes/orm.php
index 1b2e09776f..899c0246a0 100644
--- a/resources/classes/orm.php
+++ b/resources/classes/orm.php
@@ -247,7 +247,7 @@
 					}
 					else {
 						$message["name"] = $this->name;
-						$message["message"] = "Forbidden";
+						$message["message"] = "Forbidden, does not have '".$this->singular($this->name)."_delete'";
 						$message["code"] = "403";
 						$message["line"] = __line__;
 						$this->message = $message;
@@ -456,7 +456,7 @@
 									}
 									else {
 										$message["name"] = $this->name;
-										$message["message"] = "Forbidden";
+										$message["message"] = "Forbidden, does not have '".$this->singular($this->name)."_add'";
 										$message["code"] = "403";
 										$message["line"] = __line__;
 										$this->message[] = $message;
@@ -514,7 +514,7 @@
 									}
 									else {
 										$message["name"] = $this->name;
-										$message["message"] = "Forbidden";
+										$message["message"] = "Forbidden, does not have '".$this->singular($this->name)."_edit'";
 										$message["code"] = "403";
 										$message["line"] = __line__;
 										$this->message = $message;
@@ -640,7 +640,7 @@
 														}
 														else {
 															$message["name"] = $child_name;
-															$message["message"] = "Forbidden";
+															$message["message"] = "Forbidden, does not have '${child_name}_edit'";
 															$message["code"] = "403";
 															$message["line"] = __line__;
 															$this->message = $message;
@@ -732,7 +732,7 @@
 													}
 													else {
 														$message["name"] = $child_name;
-														$message["message"] = "Forbidden";
+														$message["message"] = "Forbidden, does not have '${child_name}_add'";
 														$message["code"] = "403";
 														$message["line"] = __line__;
 														$this->message = $message;