From ff1293b9838d957b4fad523e88297cc662fa210a Mon Sep 17 00:00:00 2001 From: Louis Ruch Date: Fri, 5 Feb 2021 13:17:13 -0800 Subject: [PATCH] Don't leak user ids in error messages (#916) --- internal/iam/repository_user.go | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/internal/iam/repository_user.go b/internal/iam/repository_user.go index 6146f6dce..1575e7ba6 100644 --- a/internal/iam/repository_user.go +++ b/internal/iam/repository_user.go @@ -651,7 +651,7 @@ func associateUserWithAccounts(ctx context.Context, repoKms *kms.Kms, reader db. return errors.Wrap(err, op, errors.WithMsg(fmt.Sprintf("unable to lookup account %s", accountId))) } if acct.IamUserId != "" && acct.IamUserId != userId { - return errors.New(errors.InvalidParameter, op, fmt.Sprintf("%s account is associated with a user %s", accountId, acct.IamUserId)) + return errors.New(errors.InvalidParameter, op, fmt.Sprintf("%s account is already associated with another user", accountId)) } authAccounts = append(authAccounts, &acct) }