Horizon Identity Projects Panel doesn't list projects when configured to Keystone v3 RBAC

Bug #1413851 reported by Dan Nguyen
48
This bug affects 8 people
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
High
Dan Nguyen

Bug Description

Currently Horizon requires a domain scoped token to list projects when configured to use keystone v3's policy file.

When a domain scoped token is available in the request session api.keystone.py needs to correctly handle the token for Cloud Admin, Domain Admin and member Users.

Changed in horizon:
assignee: nobody → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
status: New → In Progress
Revision history for this message
Dan Nguyen (daniel-a-nguyen) wrote :

Also fixes create projects in this patch since it was a minor fix.

Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Matthew D. Wood (woodm1979)
Changed in horizon:
assignee: Matthew D. Wood (woodm1979) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Matthew D. Wood (woodm1979)
Changed in horizon:
assignee: Matthew D. Wood (woodm1979) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Matthew D. Wood (woodm1979)
Changed in horizon:
assignee: Matthew D. Wood (woodm1979) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brad Pokorny (bpokorny)
Changed in horizon:
assignee: Brad Pokorny (bpokorny) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brad Pokorny (bpokorny)
Changed in horizon:
assignee: Brad Pokorny (bpokorny) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brad Pokorny (bpokorny)
Changed in horizon:
assignee: Brad Pokorny (bpokorny) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Diana Whitten (hurgleburgler)
Changed in horizon:
assignee: Diana Whitten (hurgleburgler) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brian Tully (brian-tully)
Changed in horizon:
assignee: Brian Tully (brian-tully) → Dan Nguyen (daniel-a-nguyen)
Revision history for this message
Timur Sufiev (tsufiev-x) wrote :

Folks, is there any patch?

Revision history for this message
jichenjc (jichenjc) wrote :

same question , Is there any patch or workaround for this bug? thanks

Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brad Pokorny (bpokorny)
Changed in horizon:
assignee: Brad Pokorny (bpokorny) → Dan Nguyen (daniel-a-nguyen)
Changed in horizon:
assignee: Dan Nguyen (daniel-a-nguyen) → Brad Pokorny (bpokorny)
Changed in horizon:
assignee: Brad Pokorny (bpokorny) → Dan Nguyen (daniel-a-nguyen)
David Lyle (david-lyle)
Changed in horizon:
milestone: none → mitaka-3
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (master)

Reviewed: https://review.openstack.org/148082
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=2b846515f388278e2bf8d0198a4f821309e08e69
Submitter: Jenkins
Branch: master

commit 2b846515f388278e2bf8d0198a4f821309e08e69
Author: daniel-a-nguyen <email address hidden>
Date: Sat Jan 17 19:19:37 2015 -0800

    Retrieve domain scoped token

    This patch supports using domain scoped tokens against keystone v3.

    Use Cases:

    Cloud Admin - view and manage identity resources across domains
    Domain Admin - view and manage identity resources in the domain logged in
    User - view identity project in the domain logged in

    Regression:

    Supports keystone v2 through local_settings.py configuration
    Supports keystone v3 with multidomain = False
    Supports keystone v3 with mulitdomain = True

    Relates to https://review.openstack.org/#/c/141153/

    Background on how to test is here
    https://wiki.openstack.org/wiki/Horizon/DomainWorkFlow

    Co-Authored-By: Brad Pokorny <email address hidden>
    Co-Authored-By: Brian Tully <email address hidden>
    Co-Authored-By: Michael Hagedorn <email address hidden>
    Co-Authored-By: woomatt <email address hidden>

    Partially Implements: blueprint domain-scoped-tokens

    Closes-Bug: #1413851
    Change-Id: Iaa19bfef9b0c70304ff81d083c62b218b2d02479

Changed in horizon:
status: In Progress → Fix Released
Revision history for this message
Doug Hellmann (doug-hellmann) wrote : Fix included in openstack/horizon 9.0.0.0rc1

This issue was fixed in the openstack/horizon 9.0.0.0rc1 release candidate.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.