yahoo-eng-team team mailing list archive

[Matthew Edmonds <edmondsw@xxxxxxxxxx>]

Public bug reported:

https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340
broke all places calling assert_admin. Previously, assert_admin checked
the "admin_required" rule. With that change, assert_admin now checks the
"identity:admin_required" rule. That rule is not defined, so what
actually gets checked is the default rule. We must fix this before
shipping Pike to avoid breaking backward compatibility.

** Affects: keystone
     Importance: Undecided
     Assignee: Matthew Edmonds (edmondsw)
         Status: New

** Changed in: keystone
     Assignee: (unassigned) => Matthew Edmonds (edmondsw)

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1703467

Title:
  assert_admin is checking default policy rule not admin_required

Status in OpenStack Identity (keystone):
  New

Bug description:
  https://github.com/openstack/keystone/commit/40c118d6ba94b15d6f66da618e1d368a0f876340
  broke all places calling assert_admin. Previously, assert_admin
  checked the "admin_required" rule. With that change, assert_admin now
  checks the "identity:admin_required" rule. That rule is not defined,
  so what actually gets checked is the default rule. We must fix this
  before shipping Pike to avoid breaking backward compatibility.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1703467/+subscriptions