yahoo-eng-team team mailing list archive

[Steve Martinelli <stevemar@xxxxxxxxxx>]

Did you read the error reported back from the server?

"You are not authorized to perform the requested action: Update of
`parent_id` is not allowed."

Did you read the API spec?

http://specs.openstack.org/openstack/keystone-specs/api/v3/identity-
api-v3.html#update-project

"The update of the parent_id is not allowed and will fail with a 403
Forbidden"

This is working as expected. If you think it's wrong, file the bug with
Keystone.


** Also affects: keystone
   Importance: Undecided
       Status: New

** Changed in: keystone
       Status: New => Won't Fix

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1475658

Title:
  using "project set --property parent_id={parent_project_id}
  {project_id}" is failed

Status in Keystone:
  Won't Fix
Status in python-openstackclient:
  New

Bug description:
  When I type in the "project set --property parent_id={parent_project_id}  {project_id}",it cause the error "You are not authorized to perform the requested action: Update of `parent_id` is not allowed."
  The whole Debug information is

  INFO: openstackclient.shell command: project set -> openstackclient.identity.v3.project.SetProject
  DEBUG: openstackclient.api.auth Auth plugin token_endpoint selected
  DEBUG: openstackclient.api.auth auth_type: token_endpoint
  INFO: openstackclient.common.clientmanager Using auth plugin: token_endpoint
  DEBUG: openstackclient.common.clientmanager Using parameters {'url': 'http://localhost:35357/v3', 'token': 'root'}
  DEBUG: openstackclient.common.clientmanager Get auth_ref
  DEBUG: openstackclient.identity.v3.project.SetProject take_action(Namespace(description=None, disable=False, domain=None, enable=False, name=None, proj
  ect='5b04b6992ee34b648c3950ab9599233b', property={'parent_id': '601a7b4e45cc4817946d2829e34d358e'}))
  DEBUG: keystoneclient.session REQ: curl -g -i -X GET http://localhost:35357/v3/projects/5b04b6992ee34b648c3950ab9599233b -H "User-Agent: python-keyston
  eclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}dc76e9f0c0006e8f919e0c515c66dbba3982f785"
  INFO: requests.packages.urllib3.connectionpool Resetting dropped connection: localhost
  DEBUG: requests.packages.urllib3.connectionpool "GET /v3/projects/5b04b6992ee34b648c3950ab9599233b HTTP/1.1" 200 256
  DEBUG: keystoneclient.session RESP: [200] content-length: 256 vary: X-Auth-Token connection: keep-alive date: Fri, 17 Jul 2015 13:20:27 GMT content-typ
  e: application/json x-openstack-request-id: req-35c897d2-bd0b-4c65-ba6f-28f376135864 
  RESP BODY: {"project": {"description": "new project1", "links": {"self": "http://localhost:35357/v3/projects/5b04b6992ee34b648c3950ab9599233b"}, "enabl
  ed": true, "id": "5b04b6992ee34b648c3950ab9599233b", "parent_id": null, "domain_id": "default", "name": "project1"}}

  DEBUG: keystoneclient.session REQ: curl -g -i -X PATCH http://localhost:35357/v3/projects/5b04b6992ee34b648c3950ab9599233b -H "User-Agent: python-keyst
  oneclient" -H "Content-Type: application/json" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}dc76e9f0c0006e8f919e0c515c66dbba3982f785" -d '{"pr
  oject": {"parent_id": "601a7b4e45cc4817946d2829e34d358e"}}'
  DEBUG: requests.packages.urllib3.connectionpool "PATCH /v3/projects/5b04b6992ee34b648c3950ab9599233b HTTP/1.1" 403 202
  DEBUG: keystoneclient.session RESP: [403] content-length: 202 vary: X-Auth-Token connection: keep-alive date: Fri, 17 Jul 2015 13:20:27 GMT content-typ
  e: application/json x-openstack-request-id: req-a49bebba-06a6-4557-8082-9696e9cbbeb0 
  RESP BODY: {"error": {"message": "You are not authorized to perform the requested action: Update of `parent_id` is not allowed. (Disable debug mode to 
  suppress these details.)", "code": 403, "title": "Forbidden"}}

  DEBUG: keystoneclient.session Request returned failure status: 403
  ERROR: openstack You are not authorized to perform the requested action: Update of `parent_id` is not allowed. (Disable debug mode to suppress these de
  tails.) (HTTP 403) (Request-ID: req-a49bebba-06a6-4557-8082-9696e9cbbeb0)
  Traceback (most recent call last):
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/cliff/app.py", line 314, in run_subcommand
      result = cmd.run(parsed_args)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/cliff/command.py", line 54, in run
      self.take_action(parsed_args)
    File "/home/heha/Documents/python-openstackclient/openstackclient/identity/v3/project.py", line 305, in take_action
      identity_client.projects.update(project.id, **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/utils.py", line 336, in inner
      return func(*args, **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/v3/projects.py", line 176, in update
      **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/base.py", line 73, in func
      return f(*args, **new_kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/base.py", line 390, in update
      method='PATCH')
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/base.py", line 219, in _update
      **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/adapter.py", line 182, in patch
      return self.request(url, 'PATCH', **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/adapter.py", line 206, in request
      resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/adapter.py", line 95, in request
      return self.session.request(url, method, **kwargs)
    File "/home/heha/Documents/python-openstackclient/openstackclient/common/session.py", line 40, in request
      resp = super(TimingSession, self).request(url, method, **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/utils.py", line 336, in inner
      return func(*args, **kwargs)
    File "/home/heha/Documents/keystone/.venv/local/lib/python2.7/site-packages/keystoneclient/session.py", line 397, in request
      raise exceptions.from_response(resp, method, url)
  Forbidden: You are not authorized to perform the requested action: Update of `parent_id` is not allowed. (Disable debug mode to suppress these details$
  ) (HTTP 403) (Request-ID: req-a49bebba-06a6-4557-8082-9696e9cbbeb0)
  DEBUG: openstackclient.shell clean_up SetProject: You are not authorized to perform the requested action: Update of `parent_id` is not allowed. (Disab$
  e debug mode to suppress these details.) (HTTP 403) (Request-ID: req-a49bebba-06a6-4557-8082-9696e9cbbeb0)
  You are not authorized to perform the requested action: Update of `parent_id` is not allowed. (Disable debug mode to suppress these details.) (HTTP 403
  ) (Request-ID: req-a49bebba-06a6-4557-8082-9696e9cbbeb0)

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1475658/+subscriptions