Remove custom auth check from resource code

Bug #1291073 reported by Arvind Tiwari
10
This bug affects 2 people
Affects Status Importance Assigned to Milestone
Barbican
Won't Fix
Undecided
Arun Kant

Bug Description

This has to be done by policy engin

        # Verify keystone_id matches the tenant ID.
        if keystone_id and keystone_id != ctx.tenant:
            _authorization_failed(u._("URI tenant does not match "
                                      "authenticated tenant."), req, resp)

Changed in barbican:
assignee: nobody → Arvind Tiwari (arvind-tiwari)
Revision history for this message
John Wood (john-wood-w) wrote :

This is more of a blueprint than a bug per se, but makes sense otherwise.

Steve Heyman (sheyman)
Changed in barbican:
status: New → Confirmed
Arun Kant (arukant)
Changed in barbican:
assignee: Arvind Tiwari (arvind-tiwari) → Arun Kant (arunkant-uws)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to barbican (master)

Fix proposed to branch: master
Review: https://review.openstack.org/81310

Changed in barbican:
status: Confirmed → In Progress
Revision history for this message
John Wood (john-wood-w) wrote :

Closing this bug out, as a blueprint supercedes this one: https://blueprints.launchpad.net/barbican/+spec/policy-target-support

Changed in barbican:
status: In Progress → Invalid
milestone: none → juno-1
Thierry Carrez (ttx)
Changed in barbican:
milestone: juno-1 → none
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on barbican (master)

Change abandoned by Arun Kant (<email address hidden>) on branch: master
Review: https://review.openstack.org/81310
Reason: Simplifying approach to implement target support with a new review. Approach is similar to what nova does, get target data only from request context.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to barbican (master)

Fix proposed to branch: master
Review: https://review.openstack.org/100376

Changed in barbican:
status: Invalid → In Progress
Changed in barbican:
status: In Progress → Won't Fix
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on barbican (master)

Change abandoned by Arun Kant (<email address hidden>) on branch: master
Review: https://review.openstack.org/100376
Reason: Target support is used in other openstack services but for now, barbican community does not want this feauture. So for now, closing it.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.