tree d3bee147b2798544b2c14126e09ae24331232268
parent cd63a8cbd34d7426cb3c2464b9f3e84a73c6770b
author Ankur <ataly@google.com> 1419017682 -0800
committer Ankur <ataly@google.com> 1419017686 -0800

"veyron2/services/security": More informative authorizqation errors

Common authorization errors that we encounter today are
"policy disallows []"
"[] does not match ACL"

Both of these are very hard to debug as it is unclear whether
credentials failed to validate (i.e, have failed caveats) or
the client's credentials are not set properly. This CL tries
to make the error more informative by dumping both the blessings
that the client sent and the ones that were successfully validated
at the server's end.

Change-Id: Ibc2c8ae74758680bc097f947b59e108226baa42d