Public bug reported:
https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340
broke all places calling assert_admin. Previously, assert_admin checked
the "admin_required" rule. With that change, assert_admin now checks the
"identity:admin_required" rule. That rule is not defined, so what
actually gets checked is the default rule. We must fix this before
shipping Pike to avoid breaking backward compatibility.
** Affects: keystone
Importance: Undecided
Assignee: Matthew Edmonds (edmondsw)
Status: New
** Changed in: keystone
Assignee: (unassigned) => Matthew Edmonds (edmondsw)
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1703467
Title:
assert_admin is checking default policy rule not admin_required
Status in OpenStack Identity (keystone):
New
Bug description:
https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340
broke all places calling assert_admin. Previously, assert_admin
checked the "admin_required" rule. With that change, assert_admin now
checks the "identity:admin_required" rule. That rule is not defined,
so what actually gets checked is the default rule. We must fix this
before shipping Pike to avoid breaking backward compatibility.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1703467/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
