Keystone RBAC should support checking against query filter items

Bug #1126043 reported by Henry Nash
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
High
Henry Nash

Bug Description

Now that Keystone supports RBAC, it needs to consider how cloud providers will want to match roles to apis. For example:

GET /users?domain_id="my domain"

A cloud provider would want to be able to protect this with a role that a user had been granted on a "my domain".

Henry Nash (henry-nash)
Changed in keystone:
importance: Undecided → High
assignee: nobody → Henry Nash (henry-nash)
Henry Nash (henry-nash)
Changed in keystone:
status: New → Fix Committed
milestone: none → grizzly-3
Henry Nash (henry-nash)
Changed in keystone:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: grizzly-3 → 2013.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.