yahoo-eng-team team mailing list archive

[Adam Young <1476264@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Steps to reproduce:

Create project

Assign non-admin role to user

As non-admin user Go to Glance and create image

As admin Delete project

As non-admin, cannot delete image

If policy requires as scoped token, even admin cannot delete the image.

This has the effect of forcing "admin somewhere is admin everywhere"

** Affects: keystone
     Importance: High
     Assignee: Adam Young (ayoung)
         Status: New

** Changed in: keystone
   Importance: Undecided => High

** Changed in: keystone
     Assignee: (unassigned) => Adam Young (ayoung)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1476264

Title:
  Cannot delete resources in remote services once project is deleted

Status in Keystone:
  New

Bug description:
  Steps to reproduce:

  Create project

  Assign non-admin role to user

  As non-admin user Go to Glance and create image

  As admin Delete project

  As non-admin, cannot delete image

  If policy requires as scoped token, even admin cannot delete the
  image.

  This has the effect of forcing "admin somewhere is admin everywhere"

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1476264/+subscriptions