← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 1535878] Re: A user with a role on a project should be able to issue a GET /project call

 

Reviewed:  https://review.openstack.org/270057
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=38e115d385153a631216a120df68a903b2faa6d7
Submitter: Jenkins
Branch:    master

commit 38e115d385153a631216a120df68a903b2faa6d7
Author: Ajaya Agrawal <ajku.agr@xxxxxxxxx>
Date:   Wed Jan 20 08:41:33 2016 +0000

    Change get_project permission
    
    Previously to issue GET /project a user needed
    at least project_admin level of permission. With
    this change, a user can issue GET /project by just
    having a role on the project.
    
    Change-Id: I9d23edc22eb88d0b21ab8968dfbe63661220a6fd
    Closes-Bug: 1535878


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1535878

Title:
  A user with a role on a project should be able to issue a GET /project
  call

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Currently, we require project admin or "higher" in order to issue a
  GET /project call. This seems overly restrictive, since if you have a
  role on a project, I would think you should be able to issue GET
  /project. Further, there are cases (such as other projects wanting
  work work au quotas) where being able to get the info on a project
  (such as it's parent) that are important.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1535878/+subscriptions


References