← Back to team overview

yahoo-eng-team team mailing list archive

[Bug 2059780] Re: Domain admin can't view roles while it can manage domain/project roles


Reviewed:  https://review.opendev.org/c/openstack/keystone/+/914759
Committed: https://opendev.org/openstack/keystone/commit/522627de3c66113d03019122735cdfc3e0d245c8
Submitter: "Zuul (22348)"
Branch:    master

commit 522627de3c66113d03019122735cdfc3e0d245c8
Author: Takashi Kajinami <kajinamit@xxxxxxxxxxxxxxx>
Date:   Fri Mar 29 23:32:48 2024 +0900

    Allow domain admin to view roles
    Domain admins are allowed to assign roles. So it should be allowed to
    view roles.
    Note that protection job is made non-voting until the domain admin role
    test cases are updated.
    Closes-Bug: #2059780
    Change-Id: Ifc25cf32ffcdb3b8a62d6741bc38e14bca0d7763

** Changed in: keystone
       Status: In Progress => Fix Released

You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).

  Domain admin can't view roles while it can manage domain/project roles

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Currently when scope is enforced, domain admin is allowed to manage
  role assignments for project or domain but domain admin can't view

  To allow domain admin to actually manipulate role assignments,
  keystone should allow domain admin to view roles.

To manage notifications about this bug go to: