yahoo-eng-team team mailing list archive

[mouadino <1337768@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

In v2 the set_user_password controller method call update_user, which
mean that setting only 'identity:change_password' to 'rule:owner' will
not works unless 'identity:update_user' is also changed to 'rule:owner'
or similar.

https://github.com/openstack/keystone/blob/stable/icehouse/keystone/identity/controllers.py#L237-239

NOTE: Stating the obvious, I picked up 'rule:owner' as an example, which
is what make sense in our case, but the problem is not specific to this
rule

** Affects: keystone
     Importance: Undecided
         Status: New

** Description changed:

  In v2 the set_user_password controller method call update_user, which
  mean that setting only 'identity:change_password' to 'rule:owner' will
  not works unless 'identity:update_user' is also changed to 'rule:owner'
  or similar.
  
  https://github.com/openstack/keystone/blob/stable/icehouse/keystone/identity/controllers.py#L237-239
+ 
+ NOTE: Stating the obvious, I picked up 'rule:owner' as an example, which
+ is what make sense in our case, but the problem is not specific to this
+ rule

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1337768

Title:
  keystone v2 api change_password authz require also update_user authz

Status in OpenStack Identity (Keystone):
  New

Bug description:
  In v2 the set_user_password controller method call update_user, which
  mean that setting only 'identity:change_password' to 'rule:owner' will
  not works unless 'identity:update_user' is also changed to
  'rule:owner' or similar.

  https://github.com/openstack/keystone/blob/stable/icehouse/keystone/identity/controllers.py#L237-239

  NOTE: Stating the obvious, I picked up 'rule:owner' as an example,
  which is what make sense in our case, but the problem is not specific
  to this rule

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1337768/+subscriptions