yahoo-eng-team team mailing list archive

[Henry Nash <henryn@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

The methods delete_user_assignments() and delete_group_assignments()  in
the assignment backends removes all assignments for a user/group -
although the code fails to set the type of assignment, and just uses
actor_id. This is nearly always going to be fine, although technically
one should also specify the type of the assignment in the delete (e.g.
USER_PROJECT/USER_DOMAIN and USER_PROJECT/GROUP_PROJECT).

** Affects: keystone
     Importance: Low
     Assignee: Henry Nash (henry-nash)
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1440135

Title:
  Cleaning up user/group assignments makes incorrect assumption that
  user_id != group_id

Status in OpenStack Identity (Keystone):
  New

Bug description:
  The methods delete_user_assignments() and delete_group_assignments()
  in the assignment backends removes all assignments for a user/group -
  although the code fails to set the type of assignment, and just uses
  actor_id. This is nearly always going to be fine, although technically
  one should also specify the type of the assignment in the delete (e.g.
  USER_PROJECT/USER_DOMAIN and USER_PROJECT/GROUP_PROJECT).

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1440135/+subscriptions