commit 6845b19f99646d955d6edf18d166709efdc6cfef
Author: Dave McCowan <email address hidden>
Date: Thu Oct 1 14:13:15 2015 -0400
Enforce project ownership of subCAs
The add-to-project and create CA commands can only be performed by
a project administrator when the target CA is either a root CA
or a subCA owned by the admin's project.
This CR adds checks to enforce this condition.
Change-Id: Ifbd7bb471b137a5549a8e627344f8f02adda2ed1
Closes-bug: #1501862
(cherry picked from commit 8bbf06caae29c1cafa16f4ed8db83938b9cf94f3)
Reviewed: https:/ /review. openstack. org/230891 /git.openstack. org/cgit/ openstack/ barbican/ commit/ ?id=6845b19f996 46d955d6edf18d1 66709efdc6cfef
Committed: https:/
Submitter: Jenkins
Branch: stable/liberty
commit 6845b19f99646d9 55d6edf18d16670 9efdc6cfef
Author: Dave McCowan <email address hidden>
Date: Thu Oct 1 14:13:15 2015 -0400
Enforce project ownership of subCAs
The add-to-project and create CA commands can only be performed by
a project administrator when the target CA is either a root CA
or a subCA owned by the admin's project.
This CR adds checks to enforce this condition.
Change-Id: Ifbd7bb471b137a 5549a8e627344f8 f02adda2ed1 afa16f4ed8db839 38b9cf94f3)
Closes-bug: #1501862
(cherry picked from commit 8bbf06caae29c1c