yahoo-eng-team team mailing list archive

[Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>]

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => icehouse-3

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1279823

Title:
  Deleting enabled domain results in confusing error

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain create heat
  +---------+---------------------------------------------------------------------------------------+
  | Field   | Value                                                                                 |
  +---------+---------------------------------------------------------------------------------------+
  | enabled | True                                                                                  |
  | id      | b1816241c3bd4a67b4059dcf62526e31                                                      |
  | links   | {u'self': u'http://192.168.122.214:5000/v3/domains/b1816241c3bd4a67b4059dcf62526e31'} |
  | name    | heat                                                                                  |
  +---------+---------------------------------------------------------------------------------------+

  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
  ERROR: cliff.app You are not authorized to perform the requested action, delete a domain that is not disabled. (HTTP 403)

  This, to me at least, is confusing - from a user perspective, it
  sounds like an instruction to delete a domain that is not disabled
  (i.e one which is enabled, which it is!), rather than information that
  you can only delete a domain which is not *enabled*

  Rewording this slightly would make the user-visible error clearer IMO:

  # openstack --os-token foobar --os-url=http://127.0.0.1:5000/v3 --os-identity-api-version=3 domain delete heat
  ERROR: cliff.app You are not authorized to perform the requested action, can't delete a domain that is enabled. (HTTP 403)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1279823/+subscriptions