Misleading response when try to delete project with children

[Brant Knudson]

When attempting to delete a project that has a child, the operation
is rejected as expected, but the message says it was rejected
because of an authority problem:

 You are not authorized to perform the requested action: cannot
 delete the project ... since it is not a leaf in the hierarchy.

This is misleading since the problem has nothing to do with
authority and granting more authority isn't going to allow the
operation to work.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/283325

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/283325
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=8e2bba4829bbaf689023c5b9c132cc527dbe482d
Submitter: Jenkins
Branch: master

commit 8e2bba4829bbaf689023c5b9c132cc527dbe482d
Author: Brant Knudson <email address hidden>
Date: Mon Feb 22 18:12:35 2016 -0600

    Fix project-related forbidden response messages

    When attempting to delete a project that has a child, the operation
    is rejected as expected, but the message said it was rejected
    because of an authority problem:

     You are not authorized to perform the requested action: cannot
     delete the project ... since it is not a leaf in the hierarchy.

    This is misleading since the problem has nothing to do with
    authority and granting more authority isn't going to allow the
    operation to work.

    There are several operations like this that are fixed.

    ForbiddenAction is meant to be used to reference the action in the
    policy file.

    Change-Id: Ibe8c1ee8e5cac7c135d0b84c5e59b630e3d91d20
    Closes-Bug: 1548562

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/keystone 9.0.0.0b3 development milestone.