yahoo-eng-team team mailing list archive

[OpenStack Infra <2059780@xxxxxxxxxxxxxxxxxx>]

Reviewed:  https://review.opendev.org/c/openstack/keystone/+/914759
Committed: https://opendev.org/openstack/keystone/commit/522627de3c66113d03019122735cdfc3e0d245c8
Submitter: "Zuul (22348)"
Branch:    master

commit 522627de3c66113d03019122735cdfc3e0d245c8
Author: Takashi Kajinami <kajinamit@xxxxxxxxxxxxxxx>
Date:   Fri Mar 29 23:32:48 2024 +0900

    Allow domain admin to view roles
    
    Domain admins are allowed to assign roles. So it should be allowed to
    view roles.
    
    Note that protection job is made non-voting until the domain admin role
    test cases are updated.
    
    Closes-Bug: #2059780
    Change-Id: Ifc25cf32ffcdb3b8a62d6741bc38e14bca0d7763


** Changed in: keystone
       Status: In Progress => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/2059780

Title:
  Domain admin can't view roles while it can manage domain/project roles

Status in OpenStack Identity (keystone):
  Fix Released

Bug description:
  Currently when scope is enforced, domain admin is allowed to manage
  role assignments for project or domain but domain admin can't view
  roles

  To allow domain admin to actually manipulate role assignments,
  keystone should allow domain admin to view roles.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/2059780/+subscriptions