Andrew Bogott has submitted this change and it was merged.

Change subject: keystone policy changes:
......................................................................


keystone policy changes:

Allow anyone to delete a trust.  It was like this before,
and I suspect this is necessary for a user to reset a token.

Change-Id: I9807785965545a3a39e6b37a6194a43450d5e751
---
M modules/openstack/files/kilo/keystone/policy.json
1 file changed, 1 insertion(+), 1 deletion(-)

Approvals:
  Andrew Bogott: Looks good to me, approved
  jenkins-bot: Verified



diff --git a/modules/openstack/files/kilo/keystone/policy.json 
b/modules/openstack/files/kilo/keystone/policy.json
index 220e31f..9752fe2 100644
--- a/modules/openstack/files/kilo/keystone/policy.json
+++ b/modules/openstack/files/kilo/keystone/policy.json
@@ -101,7 +101,7 @@
     "identity:list_trusts": "",
     "identity:list_roles_for_trust": "",
     "identity:get_role_for_trust": "",
-    "identity:delete_trust": "rule:admin_required",
+    "identity:delete_trust": "",
  
     "identity:create_consumer": "rule:admin_required",
     "identity:get_consumer": "rule:admin_required",

-- 
To view, visit https://gerrit.wikimedia.org/r/270763
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I9807785965545a3a39e6b37a6194a43450d5e751
Gerrit-PatchSet: 1
Gerrit-Project: operations/puppet
Gerrit-Branch: production
Gerrit-Owner: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: Andrew Bogott <abog...@wikimedia.org>
Gerrit-Reviewer: jenkins-bot <>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to