fix: Name the offending field in the addField permission error

spec/schemas.spec.js

@@ -1847,6 +1847,7 @@ describe('schemas', () => {
           expect(err.message).toEqual('Permission denied');
           expect(err.code).toEqual(Parse.Error.OPERATION_FORBIDDEN);
           expect(loggerErrorSpy).toHaveBeenCalledWith('Sanitized error:', jasmine.stringContaining('Permission denied for action addField on class AClass'));
+          expect(loggerErrorSpy).toHaveBeenCalledWith('Sanitized error:', jasmine.stringContaining('field hello'));
           done();
         }
       );

src/Controllers/DatabaseController.js

@@ -992,7 +992,7 @@ class DatabaseController {
       runOptions.addsField = true;
 
       const action = runOptions.action;
-      return schema.validatePermission(className, aclGroup, 'addField', action);
+      return schema.validatePermission(className, aclGroup, 'addField', action, newKeys);
     }
     return Promise.resolve();
   }

src/Controllers/SchemaController.js

@@ -1387,7 +1387,8 @@ export default class SchemaController {
     className: string,
     aclGroup: string[],
     operation: string,
-    action?: string
+    action?: string,
+    fields?: string[]
   ) {
     if (SchemaController.testPermissions(classPermissions, aclGroup, operation)) {
       return Promise.resolve();
@@ -1451,21 +1452,30 @@ export default class SchemaController {
       }
     }
 
+    const fieldInfo =
+      fields && fields.length ? ` for ${fields.length > 1 ? 'fields' : 'field'} ${fields.join(', ')}` : '';
     throw createSanitizedError(
       Parse.Error.OPERATION_FORBIDDEN,
-      `Permission denied for action ${operation} on class ${className}.`,
+      `Permission denied for action ${operation} on class ${className}${fieldInfo}.`,
       config
     );
   }
 
   // Validates an operation passes class-level-permissions set in the schema
-  validatePermission(className: string, aclGroup: string[], operation: string, action?: string) {
+  validatePermission(
+    className: string,
+    aclGroup: string[],
+    operation: string,
+    action?: string,
+    fields?: string[]
+  ) {
     return SchemaController.validatePermission(
       this.getClassLevelPermissions(className),
       className,
       aclGroup,
       operation,
-      action
+      action,
+      fields
     );
   }