yahoo-eng-team team mailing list archive

[Steven Hardy <shardy@xxxxxxxxxx>]

Public bug reported:

# openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain create heat
+---------+---------------------------------------------------------------------------------------+
| Field   | Value                                                                                 |
+---------+---------------------------------------------------------------------------------------+
| enabled | True                                                                                  |
| id      | b1816241c3bd4a67b4059dcf62526e31                                                      |
| links   | {u'self': u'http://192.168.122.214:5000/v3/domains/b1816241c3bd4a67b4059dcf62526e31'} |
| name    | heat                                                                                  |
+---------+---------------------------------------------------------------------------------------+

# openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
ERROR: cliff.app You are not authorized to perform the requested action, delete a domain that is not disabled. (HTTP 403)

This, to me at least, is confusing - from a user perspective, it sounds
like an instruction to delete a domain that is not disabled (i.e one
which is enabled, which it is!), rather than information that you can
only delete a domain which is not *enabled*

Rewording this slightly would make the user-visible error clearer IMO:

# openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
ERROR: cliff.app You are not authorized to perform the requested action, can't delete a domain that is enabled. (HTTP 403)

** Affects: keystone
     Importance: Undecided
     Assignee: Steven Hardy (shardy)
         Status: In Progress

** Changed in: keystone
     Assignee: (unassigned) => Steven Hardy (shardy)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1279823

Title:
  Deleting enabled domain results in confusing error

Status in OpenStack Identity (Keystone):
  In Progress

Bug description:
  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain create heat
  +---------+---------------------------------------------------------------------------------------+
  | Field   | Value                                                                                 |
  +---------+---------------------------------------------------------------------------------------+
  | enabled | True                                                                                  |
  | id      | b1816241c3bd4a67b4059dcf62526e31                                                      |
  | links   | {u'self': u'http://192.168.122.214:5000/v3/domains/b1816241c3bd4a67b4059dcf62526e31'} |
  | name    | heat                                                                                  |
  +---------+---------------------------------------------------------------------------------------+

  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
  ERROR: cliff.app You are not authorized to perform the requested action, delete a domain that is not disabled. (HTTP 403)

  This, to me at least, is confusing - from a user perspective, it
  sounds like an instruction to delete a domain that is not disabled
  (i.e one which is enabled, which it is!), rather than information that
  you can only delete a domain which is not *enabled*

  Rewording this slightly would make the user-visible error clearer IMO:

  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
  ERROR: cliff.app You are not authorized to perform the requested action, can't delete a domain that is enabled. (HTTP 403)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1279823/+subscriptions