Not able to delete users' stacks

Bug #1762411 reported by YG Kumar
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Incomplete
Undecided
Unassigned

Bug Description

I am unable to delete other users' heat stacks as an 'admin' user of openstack. Below is the error thrown:

------------
DELETE /v1/463f99a375cb478e982d40e26222efef/stacks/d1b25d40-404a-45b8-9706-c441ee3951c9 HTTP/1.1" 404 225
RESP BODY: {"explanation": "The resource could not be found.", "code": 404, "error": {"message": "The Stack (d1b25d40-404a-45b8-9706-c441ee3951c9) could not be found."

But when I list the stacks using "--all-projects" I can see those stacks of other users. But when I try deleting that stack as 'admin' user, it is not happening.

Thanks
Kumar

Tags: deletion stack
Revision history for this message
Rabi Mishra (rabi) wrote :

--all-projects allows you to see the stacks of all projects as an admin user. However, that would not allow you do update/delete of those stacks.

user with admin role in a specific project (ex. user with admin role in admin project) can update/delete the stacks of other projects with the stack id, provided,

The following is set in keystone.conf

admin_project_name = admin
admin_project_domain_name = Default

This makes users with admin role in the above project (admin), global administrators. Tokens scoped to this project will contain a true 'is_admin_project` attribute to indicate to policy systems that the role assignments on that specific project should apply equally across every project.

Changed in heat:
status: New → Incomplete
Rico Lin (rico-lin)
Changed in heat:
milestone: none → no-priority-tag-bugs
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.