Are there any plans to add more granular error mes...
# prisma-whats-new
l
Are there any plans to add more granular error messages when a query fails its permission query?
I would like to take action based off of which exact permissions are failing, but I can't because the error messages pretty much just tell you that you have insufficient permissions
a
I think that's by design, because you do not want to leak any information to the user regarding that.
l
Hmmmm...okay, I'll have to think about that
Why does it matter if the user has that information? If using tokens correctly, what harm could it cause?
a
I query for a user, I get an insufficient permission error, I know nothing. Now, with more verbose messages, I get back: Insufficient permissions to access details from this user, because this user does not belong to your organization. Now, I suddenly now that the user actually exists. Just an example.
👍 1