yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1214064] Re: Trust creation allowed with empty roles list

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Thierry Carrez <thierry.carrez+lp@xxxxxxxxx>
Date: Wed, 26 Mar 2014 20:26:43 -0000
Reply-to: Bug 1214064 <1214064@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: keystone
       Status: Fix Committed => Fix Released

** Changed in: keystone
    Milestone: None => icehouse-rc1

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1214064

Title:
  Trust creation allowed with empty roles list

Status in OpenStack Identity (Keystone):
  Fix Released

Bug description:
  The docs state ""A project_id may not be specified without at least one role,
  and vice versa.", however /OS-TRUST/trusts *does* allow you to create a trust
  with an empty roles list and project_id specified.

  This results in 401 responses whenever you try to consume the trust, which is
  not exactly obvious until you realize what's happening..

  It seems odd to allow creation of a trust which is seemingly useless and can
  never be consumed, so I guess either the code or the docs need updating?

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1214064/+subscriptions