yahoo-eng-team team mailing list archive

[Steve Martinelli <stevemar@xxxxxxxxxx>]

** Also affects: keystone
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1571875

Title:
  Domain role hidden by project role

Status in OpenStack Dashboard (Horizon):
  New
Status in OpenStack Identity (keystone):
  New

Bug description:
  Follow the steps below to see the problem.

  1. From the CLI, create a user and assign admin role to the default
  domain but assign no projects. Log into horizon, you will see the
  admin dashboard available to you.

  2. From the CLI, assign the user to the demo project and give the user
  the _member_ role. Log into horizon, you will no longer see the admin
  dashboard.

  Horizon automatically detects the projects you are assigned to and
  scope you to that project instantly. There needs to be a way to
  unscope the project so you can do admin related things. I think we
  need an option to uncheck the project so that you can log in under the
  domain role.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1571875/+subscriptions