Horizon revokes admin role from user if cannot get user_list
Bug #1505200 reported by
Paul Karikh
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Mirantis OpenStack |
Won't Fix
|
High
|
Nikita Konovalov | ||
7.0.x |
Won't Fix
|
High
|
Nikita Konovalov | ||
8.0.x |
Won't Fix
|
High
|
Unassigned | ||
9.x |
Won't Fix
|
High
|
Unassigned |
Bug Description
1) Deploy Horizon with users storing in LDAP
2) Create a lot of users in LDAP so Keystone couldn't return user_list
3) Go to identity/projects and try to update quotas for project where you have admin role
Sometimes you get message 'You cannot revoke your administrative privileges from the project you are currently logged into.' and sometimes you will lose your admin role.
MOS 7.0
tags: | added: horizon |
Changed in mos: | |
milestone: | none → 8.0 |
importance: | Undecided → Medium |
Changed in mos: | |
importance: | Medium → High |
Changed in mos: | |
milestone: | 8.0 → 9.0 |
tags: |
added: area-horizon removed: horizon |
tags: | added: release-notes |
tags: |
added: 8.0 release-notes-done removed: release-notes |
Changed in mos: | |
milestone: | 9.0 → 10.0 |
Changed in mos: | |
assignee: | Boris Bobrov (bbobrov) → nobody |
Changed in mos: | |
assignee: | nobody → Nikita Konovalov (nkonovalov) |
no longer affects: | mos/10.0.x |
To post a comment you must log in.
This is not directly keystone's issue. Yes, keystone should not fail to return a list with many users, but Horizon should not drop roles if the list could not be retrieved. If you try to fetch a long list of users via cli, no roles are revoked.