yahoo-eng-team team mailing list archive

[Morgan Fainberg <morgan.fainberg@xxxxxxxxx>]

The other bug was/is public (as referenced in #4 by matt) and this was
specifically for newton. Marking this as invalid as this is a Class E /
"not a bug")

** Changed in: ossa
       Status: Incomplete => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1646273

Title:
  is_admin_project missing when it's not true (missing rather than
  false)

Status in OpenStack Identity (keystone):
  Invalid
Status in OpenStack Security Advisory:
  Invalid

Bug description:
  After setting the admin_project_name = admin and
  admin_project_domain_name = Default in keystone.conf, I generated some
  tokens in the admin project. Then I validated the tokens. These tokens
  properly include the is_admin_project: true information.

  Correct token:  http://paste.openstack.org/show/591031/

  Then I switched to the "bob" project and generated and then validated
  a token. I was admin in both projects. My "bob" project token is
  missing the is_admin_project field completely. This unfortunately then
  causes the oslo.context middleware to assume that you are in an admin
  project (context assumes missing = true).

  Bob token, aka, where's the is_admin_project_field?:
  http://paste.openstack.org/show/591034/

  We're on stable/newton running on commit
  3609439599571a5919c4e1d328c1f06a8e4422c9

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1646273/+subscriptions