yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Invalid

** Changed in: keystone
    Milestone: havana-2 => None

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1183430

Title:
  GET /users/{user_id}/roles does not work as advertised

Status in OpenStack Identity (Keystone):
  Invalid

Bug description:
  The v3 identity api describes this call as follows:

  List a user's roles: GET /users/{user_id}/roles

  query_string: page (optional) query_string: per_page (optional,
  default 30)

  Response:

  Status: 200 OK

  [
      {
          "id": "--role-id--",
          "name": "--role-name--",
          "project_id": "--project-id--"
      },
      {
          "domain_id": "--domain-id--",
          "id": "--role-id--",
          "name": "--role-name--"
      }
  ]

  In reality this call always fails with: User roles not supported:
  tenant ID required

  This failure is induced explicitly in the code in an attempt to move
  away from global roles.  However, the proposed output above seems
  entirely logical and does not reflect global roles.  We should be
  supporting this api.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1183430/+subscriptions