yahoo-eng-team team mailing list archive

[OpenStack Infra <1496946@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/224876
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=5599226956fa788114747d6784e0bf7151c84d05
Submitter: Jenkins
Branch:    master

commit 5599226956fa788114747d6784e0bf7151c84d05
Author: henriquetruta <henrique@xxxxxxxxxxxxxxx>
Date:   Thu Sep 17 14:45:44 2015 -0300

    Prevents creating is_domain=True projects in v2
    
    Keystone v2 must not allow the creation of projects with the is_domain
    field set True.
    
    Co-Authored-By: Rodrigo Duarte <rodrigods@xxxxxxxxxxxxxxx>
    
    Change-Id: I569e4ab147a16bb019fb3d5f4f6218c75f4a3cca
    Closes-Bug: 1496946


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1496946

Title:
  keystone v2 allows creation of is_domain=True projects

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  in keystone v2 controller layer, there is no check if the project has the is_domain field set True:
  https://github.com/openstack/keystone/blob/master/keystone/resource/controllers.py#L95

  keystone v2 must not allow the creation of such projects

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1496946/+subscriptions