yahoo-eng-team team mailing list archive

[OpenStack Infra <1675377@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.openstack.org/449161
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=72216757991a2120bb81e0003496eee908373b0c
Submitter: Jenkins
Branch:    master

commit 72216757991a2120bb81e0003496eee908373b0c
Author: David Stanek <dstanek@xxxxxxxxxxx>
Date:   Thu Mar 23 13:50:40 2017 +0000

    Set the correct in-code policy for ec2 operations
    
    In I8bd0fa342cdfee00acd3c7a33f7232fe0a87e23f we moved some of the policy
    defaults into code. Some of the policy were accidentally changed.
    
    Change-Id: Ib744317025d928c7397ab00dc706172592a9abaf
    Closes-Bug: #1675377


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1675377

Title:
  Lack rights for regular user: unability to create ec2 credentials

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  As a regular OpenStack user, I was able to create ec2 credentials
  without "admin" rights. It was possible before merging one of the
  recent changes (Presumably, this one - [0]). Now, I'm getting an error
  "You are not authorized to perform the requested action:
  identity:ec2_create_credential."[1]

  [0] - https://github.com/openstack/keystone/commit/e2949253176b6bf7f9e3ef1ac2793e4abd6382ca
  [1] - http://logs.openstack.org/75/429175/16/check/gate-rally-dsvm-rally-ubuntu-xenial/16674c1/rally-plot/results.html.gz#/KeystoneBasic.create_and_delete_ec2credential/failures

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1675377/+subscriptions