sa/ma credentials include the rights authority+sa or authority+ma, authorities includ...

[sfa.git] / geni / util / credential.py

diff --git a/geni/util/credential.py b/geni/util/credential.py
index 697adf0..1d469ac 100644 (file)
--- a/geni/util/credential.py
+++ b/geni/util/credential.py
@@ -204,7 +204,7 @@ class Credential(Certificate):
             # make sure the rights given to the child are a subset of the
             # parents rights
             if not self.parent.get_privileges().is_superset(self.get_privileges()):
-                raise ChildRightsNotSubsetOfParent(self.get_subject())
+                raise ChildRightsNotSubsetOfParent(self.get_subject() + " " + self.parent.get_privileges().save_to_string() + " " + self.get_privileges().save_to_string())
 
         return