yahoo-eng-team team mailing list archive

[Ryan Peters <rjpeter2@xxxxxxxxx>]

Public bug reported:

When using the is_domain_admin() check, pure project admins will get
this returned as true when that should not be the case. This is because
this function uses the keystone policy check of:
admin_and_matching_domain_id. Which will incorrectly return true for a
pure project admin.

** Affects: horizon
     Importance: Undecided
     Assignee: Ryan Peters (rjpeter2)
         Status: In Progress

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1597884

Title:
  domain admin check has incorrect permissions

Status in OpenStack Dashboard (Horizon):
  In Progress

Bug description:
  When using the is_domain_admin() check, pure project admins will get
  this returned as true when that should not be the case. This is
  because this function uses the keystone policy check of:
  admin_and_matching_domain_id. Which will incorrectly return true for a
  pure project admin.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1597884/+subscriptions