OpenStack Identity (keystone)

  1. Bug #1872735
  2. Comment #10

Comment 10 for bug 1872735

Revision history for this message
kay (kay-diam) wrote : Re: EC2 and/or credential endpoints are not protected from a scoped context

> I think opening a second (public?) bug might be worthwhile.

To be on the safe side, I'd open a private issue for this, because "openstack request token authorize" requires a role definition and "OAuth1 trustor" user expects that oauth1 token will be limited to this role, but it this role is ignored by Keystone: https://bugs.launchpad.net/keystone/+bug/1873290