yahoo-eng-team team mailing list archive
-
yahoo-eng-team team
-
Mailing list archive
-
Message #65822
[Bug 1662911] Re: v3 API create_user does not use default_project_id
I'm going to mark this as invalid based on the security concerns
highlighted in comment #9. Please feel free to continue using the thread
for discussion as needed.
** Changed in: keystone
Status: New => Opinion
** Changed in: keystone
Status: Opinion => Invalid
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1662911
Title:
v3 API create_user does not use default_project_id
Status in Designate:
Triaged
Status in OpenStack Identity (keystone):
Invalid
Bug description:
The v3 call to create a user doesn't use the default_project_id
argument except to validate it.
https://github.com/openstack/keystone/blob/master/keystone/identity/core.py#L918-L919
This caused problems when updating grenade to allow the ocata->pike
tests to run, because the user was not set up with a default role as
it had been under V2.
https://review.openstack.org/#/c/427916/1
http://logs.openstack.org/16/427916/1/check/gate-grenade-dsvm-neutron-ubuntu-xenial/56b7a7d/logs/apache/keystone.txt.gz?level=WARNING#_2017-02-08_13_48_57_247
http://logs.openstack.org/16/427916/1/check/gate-grenade-dsvm-neutron-ubuntu-xenial/56b7a7d/logs/grenade.sh.txt.gz#_2017-02-08_13_48_54_600
To manage notifications about this bug go to:
https://bugs.launchpad.net/designate/+bug/1662911/+subscriptions
References