Project tags should account for different scopes.
Bug #1844193 reported by
Lance Bragstad
This bug affects 1 person
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
High
|
Lance Bragstad |
Bug Description
Project resources in keystone can be tagged with simple strings called tags. Operations for managing a project's tags should only be managed by system administrators and not project-level or domain-level users.
The policies that protect project tags should understand system-scope [0].
tags: | added: policy system-scope |
Changed in keystone: | |
status: | New → Triaged |
importance: | Undecided → High |
milestone: | none → train-rc1 |
Changed in keystone: | |
status: | Triaged → In Progress |
Changed in keystone: | |
assignee: | nobody → Lance Bragstad (lbragstad) |
To post a comment you must log in.
Patch in review: https:/ /review. opendev. org/#/c/ 682503/