yahoo-eng-team team mailing list archive

[Nathan Kinder <nkinder@xxxxxxxxxx>]

Public bug reported:

When using the policy.v3cloudsample.json, a domain admin (possessing the
'admin' role with a domain scoped token) is not allowed to show their
own domain.  This operation is restricted to the cloud admin:

  "identity:get_domain": "rule:cloud_admin"

The admin of a domain should be allowed to view/show their own domain.

** Affects: keystone
     Importance: Undecided
     Assignee: Nathan Kinder (nkinder)
         Status: In Progress

** Changed in: keystone
     Assignee: (unassigned) => Nathan Kinder (nkinder)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1384365

Title:
  Domain admin should be allowed to show their domain

Status in OpenStack Identity (Keystone):
  In Progress

Bug description:
  When using the policy.v3cloudsample.json, a domain admin (possessing
  the 'admin' role with a domain scoped token) is not allowed to show
  their own domain.  This operation is restricted to the cloud admin:

    "identity:get_domain": "rule:cloud_admin"

  The admin of a domain should be allowed to view/show their own domain.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1384365/+subscriptions