yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

This was reverted -
https://github.com/openstack/keystone/commit/4a82ab9065a659bbcb838240da113a0509f651aa

** Changed in: keystone
       Status: Fix Released => In Progress

** Changed in: keystone
    Milestone: pike-1 => None

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1652012

Title:
  token model assumes a token is is_admin_project

Status in OpenStack Identity (keystone):
  In Progress

Bug description:
  Our token model code will return a default of True for
  is_admin_project if that attribute is not defined [0]. The comment
  next to this says this is for backward compatibility - but this seems
  inherently dangerous. We should investigate what changes are needed
  (if any) to make the default False.

  [0]
  https://github.com/openstack/keystone/blob/686f9d583eaa5f015d6b8b995c2f4243392ffbce/keystone/models/token_model.py#L195-L198

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1652012/+subscriptions