← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2056377] [NEW] Create Role button is not visible for default admin user

 

Public bug reported:

When I navigate to the Identity->Roles page as the admin user, I see a
list of the roles in the cluster, but no buttons to create/modify/delete
the roles.

I am using a charmed install of a Yoga cluster, and the default admin
user (username: admin, domain: admin_domain, default keystone policies
and default horizon policies, that is no overrides). I can
create/modify/delete roles from the CLI.

I thought this might have been a subtlety of the policy rules, so I
tested including some Horizon policy overrides, which open up the
policies to any user (setting every policy listed in the
keystone/identity folders to "@"). This didn't change anything. To
verify I was setting the policies correctly, I tested
"identity:create_user": "!" and the "Create User" button disappeared in
Horizon.

This bug seems similar to [1] however I am using the default admin
"power user" instead of adding domain roles.

[1] https://bugs.launchpad.net/horizon/+bug/1775227

** Affects: horizon
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/2056377

Title:
  Create Role button is not visible for default admin user

Status in OpenStack Dashboard (Horizon):
  New

Bug description:
  When I navigate to the Identity->Roles page as the admin user, I see a
  list of the roles in the cluster, but no buttons to
  create/modify/delete the roles.

  I am using a charmed install of a Yoga cluster, and the default admin
  user (username: admin, domain: admin_domain, default keystone policies
  and default horizon policies, that is no overrides). I can
  create/modify/delete roles from the CLI.

  I thought this might have been a subtlety of the policy rules, so I
  tested including some Horizon policy overrides, which open up the
  policies to any user (setting every policy listed in the
  keystone/identity folders to "@"). This didn't change anything. To
  verify I was setting the policies correctly, I tested
  "identity:create_user": "!" and the "Create User" button disappeared
  in Horizon.

  This bug seems similar to [1] however I am using the default admin
  "power user" instead of adding domain roles.

  [1] https://bugs.launchpad.net/horizon/+bug/1775227

To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/2056377/+subscriptions