yahoo-eng-team team mailing list archive

[Dolph Mathews <1360362@xxxxxxxxxxxxxxxxxx>]

We'd also have to not allow the current user to delete themselves, nor
the user to remove their last role assignment from the current scope,
etc. I'm all in favor of UX, but I also prefer the power to shoot myself
in the foot if I so choose. If we "fixed" this, I guarantee we'd get a
subsequent bug report complaining that they weren't allowed to delete
the last tenant, or whatever.

** Changed in: keystone
    Milestone: juno-rc1 => None

** Changed in: keystone
       Status: New => Opinion

** Changed in: keystone
   Importance: Undecided => Wishlist

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1360362

Title:
  Prevent deletion of currently scoped tenant

Status in OpenStack Identity (Keystone):
  Opinion

Bug description:
  While being the admin, you are able to delete the admin project.

  
  [rhallisey@localhost devstack]$ keystone tenant-list
  keystone +----------------------------------+--------------------+---------+
  |                id                |        name        | enabled |
  +----------------------------------+--------------------+---------+
  | e00677dd11c545cfaaf9b80ed23791a1 |       admin        |   True  |
  | 97dc1ee5558642a0b193179e1efa79f7 |      alt_demo      |   True  |
  | 06a3bb546b5f4889b0ea76e0987a4087 |        demo        |   True  |
  | 2af18f242b3c4025b8cdafb73b5a7788 | invisible_to_admin |   True  |
  | ff386a5825304cd29a5b6235bfea5aa5 |       scrub        |   True  |
  | bfa6846390a64f9aa416fe2692ada9d3 |      service       |   True  |
  +----------------------------------+--------------------+---------+
  [rhallisey@localhost devstack]$ keystone tenant-delete admin
  [rhallisey@localhost devstack]$ keystone tenant-list
  Could not find project: admin (Disable debug mode to suppress these details.) (HTTP 401)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1360362/+subscriptions