yahoo-eng-team team mailing list archive

[Marcos Lobo <1343932@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

In Icehouse release, CRUD grant functions[1] don't check if user_id and
group_id exists.

role_id, domain_id and project_id are checked and I don't see any reason
why don't check user_id and group_id as well. I think we should change
these functions to check if user_id and group_id exists.

[1]
https://github.com/openstack/keystone/blob/stable/icehouse/keystone/assignment/backends/ldap.py#L347

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1343932

Title:
  CRUD grant don't check user_id and group_id

Status in OpenStack Identity (Keystone):
  New

Bug description:
  In Icehouse release, CRUD grant functions[1] don't check if user_id
  and group_id exists.

  role_id, domain_id and project_id are checked and I don't see any
  reason why don't check user_id and group_id as well. I think we should
  change these functions to check if user_id and group_id exists.

  [1]
  https://github.com/openstack/keystone/blob/stable/icehouse/keystone/assignment/backends/ldap.py#L347

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1343932/+subscriptions