yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #33470
[Bug 1461095] Re: Token is not revoked when removing a user from project in Horizon
Then it's an OSSA class E type of bug.
** Changed in: ossa
Status: Incomplete => Won't Fix
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1461095
Title:
Token is not revoked when removing a user from project in Horizon
Status in OpenStack Identity (Keystone):
Invalid
Status in OpenStack Security Advisories:
Won't Fix
Bug description:
Steps:
1. Login to dashboard as admin
2. Create project (as example - `project_1`)
3. Create Member-user.
4. add Member-user to `project_1`
5. In another browser login as Member-user
6. go to `/project/instance` (the behavior is typical for another pages - `volumes`, `images`, `identity`)
7. refresh (or go to page) - 3-5 times. Stay of this page.
8. Then, as admin, remove Member-user from `project_1`
9. as Member-user try go to `/project/instance` -- you don't get error
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1461095/+subscriptions
References