yahoo-eng-team team mailing list archive

[Hidekazu Nakamura <1384365@xxxxxxxxxxxxxxxxxx>]

*** This bug is a duplicate of bug 1480480 ***
    https://bugs.launchpad.net/bugs/1480480

** This bug has been marked a duplicate of bug 1480480
   keystone v3 example policy file should allow domain admin to  get it's current domain

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1384365

Title:
  Domain admin should be allowed to show their domain

Status in Keystone:
  Incomplete

Bug description:
  When using the policy.v3cloudsample.json, a domain admin (possessing
  the 'admin' role with a domain scoped token) is not allowed to show
  their own domain.  This operation is restricted to the cloud admin:

    "identity:get_domain": "rule:cloud_admin"

  The admin of a domain should be allowed to view/show their own domain.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1384365/+subscriptions