yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1153645] Re: Deleting a role should revoke any tokens associated with it

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Wed, 02 Oct 2013 11:27:26 -0000
Reply-to: Bug 1153645 <1153645@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1153645

Title:
  Deleting a role should revoke any tokens associated with it

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  When we delete a role, we delete all the grants associated with it.
  Since this is a bit like an enforced revoking of user/groups grants,
  we should invalidate any tokens:

  - for users that have had any grant using this role
  - for users of any group that has had a grant using this role

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1153645/+subscriptions