policy.v3cloudsample.json still broken in Newton

[Jay Jahns]

This policy file works using the CLI clients; however, it does NOT work with Horizon, yet again. This is the same problem I observed with Mitaka, that forced me to revert to the liberty policy file. I've had to do that again.

Error message for user who just logged in linked below. This is a problem that we need to fix, and I can recreate the issue at will.

https://gist.githubusercontent.com/jjahns/970daf472abea086403269920280d53c/raw/64480893b4cb1f65f63d48bbf05391597c5db74d/gistfile1.txt

My workaround has been to take the liberty V3 policy json file and copy it into openstack_dashboard/conf/keystone_policy.json. That appears to be fully functional, but we need to fix this behavior as having a policy from 2 versions ago does not make any sense.

[Lance Bragstad (lbragstad)]

Hi Jay,

This looks like a duplicate of https://bugs.launchpad.net/keystone/+bug/1645632, which looks like an issue with oslo.policy and not necessarily keystone. The keystone and horizon development teams do have a weekly meeting dedicated to working through issues like this [0]. This was something that came up in the Ocata design summit in Barcelona and is being tracked as an item on our meeting agenda [1].

I'll put this bug on the agenda for this week so that it gets visibility from both projects, even though it is probably a duplicate.

[0] http://eavesdrop.openstack.org/#Keystone/Horizon_Collaboration_Meeting
[1] https://etherpad.openstack.org/p/ocata-keystone-horizon