yahoo-eng-team team mailing list archive

[Dolph Mathews <1183430@xxxxxxxxxxxxxxxxxx>]

https://review.openstack.org/32151

** Changed in: keystone
       Status: New => Incomplete

** Changed in: keystone
       Status: Incomplete => Opinion

** Changed in: keystone
       Status: Opinion => Confirmed

** Changed in: keystone
   Importance: Undecided => Medium

** Changed in: keystone
       Status: Confirmed => In Progress

** Changed in: keystone
     Assignee: (unassigned) => Dolph Mathews (dolph)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1183430

Title:
  GET /users/{user_id}/roles does not work as advertised

Status in OpenStack Identity (Keystone):
  In Progress

Bug description:
  The v3 identity api describes this call as follows:

  List a user's roles: GET /users/{user_id}/roles

  query_string: page (optional) query_string: per_page (optional,
  default 30)

  Response:

  Status: 200 OK

  [
      {
          "id": "--role-id--",
          "name": "--role-name--",
          "project_id": "--project-id--"
      },
      {
          "domain_id": "--domain-id--",
          "id": "--role-id--",
          "name": "--role-name--"
      }
  ]

  In reality this call always fails with: User roles not supported:
  tenant ID required

  This failure is induced explicitly in the code in an attempt to move
  away from global roles.  However, the proposed output above seems
  entirely logical and does not reflect global roles.  We should be
  supporting this api.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1183430/+subscriptions