yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #46157
[Bug 1535878] Re: A user with a role on a project should be able to issue a GET /project call
Reviewed: https://review.openstack.org/270057
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=38e115d385153a631216a120df68a903b2faa6d7
Submitter: Jenkins
Branch: master
commit 38e115d385153a631216a120df68a903b2faa6d7
Author: Ajaya Agrawal <ajku.agr@xxxxxxxxx>
Date: Wed Jan 20 08:41:33 2016 +0000
Change get_project permission
Previously to issue GET /project a user needed
at least project_admin level of permission. With
this change, a user can issue GET /project by just
having a role on the project.
Change-Id: I9d23edc22eb88d0b21ab8968dfbe63661220a6fd
Closes-Bug: 1535878
** Changed in: keystone
Status: In Progress => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1535878
Title:
A user with a role on a project should be able to issue a GET /project
call
Status in OpenStack Identity (keystone):
Fix Released
Bug description:
Currently, we require project admin or "higher" in order to issue a
GET /project call. This seems overly restrictive, since if you have a
role on a project, I would think you should be able to issue GET
/project. Further, there are cases (such as other projects wanting
work work au quotas) where being able to get the info on a project
(such as it's parent) that are important.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1535878/+subscriptions
References