yahoo-eng-team team mailing list archive

[lumeihong <lu.meihong@xxxxxxxxxx>]

Public bug reported:

Delete domain by domain_id as follows:
curl  -H "X-Auth_Token:$ADMIN" -X DELETE  http://localhost:35357/v3/domains/b3ee886f22d544a7bfc0426edac0543f

then get a list of role assignments :
 curl -H  "X-Auth_Token:55fc47665d344104b801751784292ccb"  http://localhost:35357/v3/role_assignments  |python -mjson.tool
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  4267  100  4267    0     0  24020      0 --:--:-- --:--:-- --:--:-- 24107
{
    "links": {
        "next": null,
        "previous": null,
        "self": "http://localhost:35357/v3/role_assignments";
    },
    "role_assignments": [
       
        {
            "links": {
                "assignment": "http://localhost:35357/v3/domains/b3ee886f22d544a7bfc0426edac0543f/users/c6b7c33a5cfc45ba8d666b03ba29ea34/roles/7117d8a1a8c04d038c54cf75f6b354b4";
            },
            "role": {
                "id": "7117d8a1a8c04d038c54cf75f6b354b4"
            },
            "scope": {
                "domain": {
                    "id": "b3ee886f22d544a7bfc0426edac0543f"
                }
            },
            "user": {
                "id": "c6b7c33a5cfc45ba8d666b03ba29ea34"
            }
        }
    ]
}
the user's(id:c6b7c33a5cfc45ba8d666b03ba29ea34) role in the domain(id:b3ee886f22d544a7bfc0426edac0543f) still exists.
In fact, it should be deleted.

** Affects: keystone
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1439934

Title:
  Delete a domain with v3 API doesn't delete the user's role in the
  domain

Status in OpenStack Identity (Keystone):
  New

Bug description:
  Delete domain by domain_id as follows:
  curl  -H "X-Auth_Token:$ADMIN" -X DELETE  http://localhost:35357/v3/domains/b3ee886f22d544a7bfc0426edac0543f

  then get a list of role assignments :
   curl -H  "X-Auth_Token:55fc47665d344104b801751784292ccb"  http://localhost:35357/v3/role_assignments  |python -mjson.tool
    % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                   Dload  Upload   Total   Spent    Left  Speed
  100  4267  100  4267    0     0  24020      0 --:--:-- --:--:-- --:--:-- 24107
  {
      "links": {
          "next": null,
          "previous": null,
          "self": "http://localhost:35357/v3/role_assignments";
      },
      "role_assignments": [
         
          {
              "links": {
                  "assignment": "http://localhost:35357/v3/domains/b3ee886f22d544a7bfc0426edac0543f/users/c6b7c33a5cfc45ba8d666b03ba29ea34/roles/7117d8a1a8c04d038c54cf75f6b354b4";
              },
              "role": {
                  "id": "7117d8a1a8c04d038c54cf75f6b354b4"
              },
              "scope": {
                  "domain": {
                      "id": "b3ee886f22d544a7bfc0426edac0543f"
                  }
              },
              "user": {
                  "id": "c6b7c33a5cfc45ba8d666b03ba29ea34"
              }
          }
      ]
  }
  the user's(id:c6b7c33a5cfc45ba8d666b03ba29ea34) role in the domain(id:b3ee886f22d544a7bfc0426edac0543f) still exists.
  In fact, it should be deleted.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1439934/+subscriptions