yahoo-eng-team team mailing list archive

[Lance Bragstad <lbragstad@xxxxxxxxx>]

Public bug reported:

When you setup a user with a role assignment on a domain and then a role
assignment on a project "acting as a domain", you can't actually remove
them. The following pastes sets up the environment:

http://paste.openstack.org/show/695978/

Which results in the following when a user tries to remove either of
those assignments:

http://paste.openstack.org/show/696013/

And the resulting trace:

http://paste.openstack.org/show/695994/

It appears the issue is because the somewhere in the assignment code
we're only expecting a single assignment to be returned for us to
delete, which isn't the case here and causes ambiguity.

** Affects: keystone
     Importance: High
         Status: Triaged

** Changed in: keystone
       Status: New => Triaged

** Changed in: keystone
   Importance: Undecided => High

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1754677

Title:
  Unable to remove an assignment from domain and project

Status in OpenStack Identity (keystone):
  Triaged

Bug description:
  When you setup a user with a role assignment on a domain and then a
  role assignment on a project "acting as a domain", you can't actually
  remove them. The following pastes sets up the environment:

  http://paste.openstack.org/show/695978/

  Which results in the following when a user tries to remove either of
  those assignments:

  http://paste.openstack.org/show/696013/

  And the resulting trace:

  http://paste.openstack.org/show/695994/

  It appears the issue is because the somewhere in the assignment code
  we're only expecting a single assignment to be returned for us to
  delete, which isn't the case here and causes ambiguity.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1754677/+subscriptions