Tokens are revoked when assigning a role to a group
Bug #1187359 reported by
Dolph Mathews
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Invalid
|
Medium
|
Unassigned |
Bug Description
Bug 1170186 changed user role assignments such that they do not revoke the user's tokens. After that patch merged, it was caught in code review that group role assignments result in the same behavior (mass token revocation). This behavior is unnecessary and should be removed for the same reasons as cited in the above bug.
tags: | added: grizzly-backport-potential |
summary: |
- Tokens are revoked when adding a user to a group + Tokens are revoked when assigning a role to a group |
tags: | removed: grizzly-backport-potential |
To post a comment you must log in.
Dolph: I think the first description was correct. Assigning user to a group, also revokes the user's token.
For the case of assigning a role to a group, I haven't test this case yet if it will revokes the group member's token.