yahoo-eng-team team mailing list archive

[OpenStack Infra <1805368@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/667730
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=bbd77d0bf9dde57e5ca5d53f7214df85713b9f1e
Submitter: Zuul
Branch:    master

commit bbd77d0bf9dde57e5ca5d53f7214df85713b9f1e
Author: Lance Bragstad <lbragstad@xxxxxxxxx>
Date:   Wed Jun 26 20:54:22 2019 +0000

    Implement domain admin support for grants
    
    This commit goes through and updates grant policies to allow domain
    administrator to manager grants for their domains and projects within
    thier domain.
    
    Co-Authored-By: Colleen Murphy <colleen@xxxxxxxxxxx>
    
    Change-Id: I5f1839a3f8d23d17e449aa9f8710d70233ee8fcc
    Closes-Bug: 1805368
    Closes-Bug: 1750669


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1805368

Title:
  Grant API doesn't use default roles

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  In Rocky, keystone implemented support to ensure at least three
  default roles were available [0]. The grant API doesn't incorporate
  these defaults into its default policies [1], but it should.

  [0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html
  [1] http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/policies/grant.py?id=fb73912d87b61c419a86c0a9415ebdcf1e186927

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1805368/+subscriptions