yahoo-eng-team team mailing list archive

[OpenStack Infra <1536321@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/271134
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=2a5599811e6164bf7e05f55d7157934a1ac7e3a3
Submitter: Jenkins
Branch:    master

commit 2a5599811e6164bf7e05f55d7157934a1ac7e3a3
Author: Adam Young <ayoung@xxxxxxxxxx>
Date:   Thu Jan 21 23:14:41 2016 -0500

    Check for circular references when expanding implied roles
    
    closes-bug #1536321
    
    Change-Id: I30d4f54135864d10093437a0541d6f40255e40e2


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1536321

Title:
  cyclic dependencies in implied roles

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Today it is possible to define an implied role structure that is not a
  DAG.  This will crash the Keystone server if a token iis requested
  that will pull in any of those roles.


  While it might be impractical to prevent cycles in the creation, it is
  very possible to prevent the expansion from crashing the server.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1536321/+subscriptions