yahoo-eng-team team mailing list archive

[Samuel de Medeiros Queiroz <samuel@xxxxxxxxxxxxxxx>]

Public bug reported:

If a user has an inherited role in a domain, he is able to get a token
on every project inside that domain, even if he doesn't have a specific
grant on that project.

Currently, there is no test for this feature, we should create it.

** Affects: keystone
     Importance: Undecided
     Assignee: Samuel de Medeiros Queiroz (samuel-z)
         Status: New

** Changed in: keystone
     Assignee: (unassigned) => Samuel de Medeiros Queiroz (samuel-z)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1365147

Title:
  No test for tokens using inherited domain role

Status in OpenStack Identity (Keystone):
  New

Bug description:
  If a user has an inherited role in a domain, he is able to get a token
  on every project inside that domain, even if he doesn't have a
  specific grant on that project.

  Currently, there is no test for this feature, we should create it.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1365147/+subscriptions