Commit 63346d97 authored by Cao Shufeng's avatar Cao Shufeng

remove extra function call

We have read user info from context in previous line. No need to call this function again.
parent 815b340f
...@@ -60,7 +60,6 @@ func ConfirmNoEscalation(ctx genericapirequest.Context, ruleResolver Authorizati ...@@ -60,7 +60,6 @@ func ConfirmNoEscalation(ctx genericapirequest.Context, ruleResolver Authorizati
ownerRightsCover, missingRights := Covers(ownerRules, rules) ownerRightsCover, missingRights := Covers(ownerRules, rules)
if !ownerRightsCover { if !ownerRightsCover {
user, _ := genericapirequest.UserFrom(ctx)
return apierrors.NewUnauthorized(fmt.Sprintf("attempt to grant extra privileges: %v user=%v ownerrules=%v ruleResolutionErrors=%v", missingRights, user, ownerRules, ruleResolutionErrors)) return apierrors.NewUnauthorized(fmt.Sprintf("attempt to grant extra privileges: %v user=%v ownerrules=%v ruleResolutionErrors=%v", missingRights, user, ownerRules, ruleResolutionErrors))
} }
return nil return nil
......
Markdown is supported
0% or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment