Public bug reported:
Actually, Keystone accepts to create a region with an empty ID in the request body, and creates a unreachable region, with no possibility to use, modify or delete them. > curl -X POST -H "X-Auth-Token: *TOKEN*" -H 'Content-type: > application/json' http://localhost:35357/v3/regions/ -d > '{"region":{"id":""}}' {"region": {"parent_region_id": null, "id": "", "links": {"self": "http://localhost:35357/v3/regions/"}, "description": ""}} Instead, It should return a 400 Bad Request error. ** Affects: keystone Importance: Undecided Status: New -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Keystone. https://bugs.launchpad.net/bugs/1322639 Title: region creation API should not allow empty id Status in OpenStack Identity (Keystone): New Bug description: Actually, Keystone accepts to create a region with an empty ID in the request body, and creates a unreachable region, with no possibility to use, modify or delete them. > curl -X POST -H "X-Auth-Token: *TOKEN*" -H 'Content-type: application/json' http://localhost:35357/v3/regions/ -d '{"region":{"id":""}}' {"region": {"parent_region_id": null, "id": "", "links": {"self": "http://localhost:35357/v3/regions/"}, "description": ""}} Instead, It should return a 400 Bad Request error. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1322639/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
