yahoo-eng-team team mailing list archive

[Roxana Gherle <roxana.gherle@xxxxxx>]

Public bug reported:

Horizon has the option to set OPENSTACK_KEYSTONE_FEDERATION_MANAGEMENT
in local_settings.py in order to enable the "Federation" management
panel - that is CRUD operations on Identity Providers and Federation
Mappings.

That works fine for a user logging in using Keystone credentials if the user has admin role.
However, if I try to login through WebSSO, using an external Identity Provider (ADFS for example), the federated user can't see the "Federation" panel even if he has admin role on the projects.

I imagine this is a bug and I don't see any reason why the federated
user with admin role doesn't have access to the Federation panel.

** Affects: horizon
     Importance: Undecided
         Status: New

** Affects: keystone
     Importance: Undecided
         Status: New

** Also affects: keystone
   Importance: Undecided
       Status: New

** Summary changed:

- WebSSO user can't see the "Federation" management panel
+ WebSSO user can't see the "Federation" management panel in Horizon

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1603579

Title:
  WebSSO user can't see the "Federation" management panel in Horizon

Status in OpenStack Dashboard (Horizon):
  New
Status in OpenStack Identity (keystone):
  New

Bug description:
  Horizon has the option to set OPENSTACK_KEYSTONE_FEDERATION_MANAGEMENT
  in local_settings.py in order to enable the "Federation" management
  panel - that is CRUD operations on Identity Providers and Federation
  Mappings.

  That works fine for a user logging in using Keystone credentials if the user has admin role.
  However, if I try to login through WebSSO, using an external Identity Provider (ADFS for example), the federated user can't see the "Federation" panel even if he has admin role on the projects.

  I imagine this is a bug and I don't see any reason why the federated
  user with admin role doesn't have access to the Federation panel.

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1603579/+subscriptions