Public bug reported: https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340 broke all places calling assert_admin. Previously, assert_admin checked the "admin_required" rule. With that change, assert_admin now checks the "identity:admin_required" rule. That rule is not defined, so what actually gets checked is the default rule. We must fix this before shipping Pike to avoid breaking backward compatibility.
** Affects: keystone Importance: Undecided Assignee: Matthew Edmonds (edmondsw) Status: New ** Changed in: keystone Assignee: (unassigned) => Matthew Edmonds (edmondsw) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1703467 Title: assert_admin is checking default policy rule not admin_required Status in OpenStack Identity (keystone): New Bug description: https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340 broke all places calling assert_admin. Previously, assert_admin checked the "admin_required" rule. With that change, assert_admin now checks the "identity:admin_required" rule. That rule is not defined, so what actually gets checked is the default rule. We must fix this before shipping Pike to avoid breaking backward compatibility. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1703467/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp