yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1149620] Re: Only unscoped token should be able to request a token

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Dolph Mathews <1149620@xxxxxxxxxxxxxxxxxx>
Date: Mon, 10 Jun 2013 17:58:47 -0000
Reply-to: Bug 1149620 <1149620@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
   Importance: Undecided => Wishlist

** Changed in: keystone
       Status: New => Opinion

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1149620

Title:
  Only unscoped token should be able to request a token

Status in OpenStack Identity (Keystone):
  Opinion

Bug description:
  Unscoped tokens represent actions to be taken on Keystone only.  As
  such, scoped tokens should not be allowed to do the most restriced of
  activities, like request other tokens.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1149620/+subscriptions