yahoo-eng-team team mailing list archive

[Nathan Kinder <nkinder@xxxxxxxxxx>]

Public bug reported:

When the LDAP assignment driver is used and the "use_dumb_member"
configuration option is enabled, the dumb member is listed when listing
the role assignments.  This can be seen by running the live LDAP tests,
as the "test_list_role_assignments_unfiltered" test will fail due to the
additional role assignments for the dumb member.

We should be filtering out the dumb member in
RoleApi.list_role_assignments(), as we already do inRoleApi.
get_role_assignments().

** Affects: keystone
     Importance: Undecided
     Assignee: Nathan Kinder (nkinder)
         Status: In Progress

** Changed in: keystone
       Status: New => In Progress

** Changed in: keystone
     Assignee: (unassigned) => Nathan Kinder (nkinder)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1280965

Title:
  LDAP dumb user is not filtered when listing role assignments

Status in OpenStack Identity (Keystone):
  In Progress

Bug description:
  When the LDAP assignment driver is used and the "use_dumb_member"
  configuration option is enabled, the dumb member is listed when
  listing the role assignments.  This can be seen by running the live
  LDAP tests, as the "test_list_role_assignments_unfiltered" test will
  fail due to the additional role assignments for the dumb member.

  We should be filtering out the dumb member in
  RoleApi.list_role_assignments(), as we already do inRoleApi.
  get_role_assignments().

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1280965/+subscriptions