Unauthorized exception in users panel as a member role user.

Bug #1684475 reported by wei.ying
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
Fix Released
High
wei.ying

Bug Description

Env: devstack master branch

Steps to reproduce:
1. Enable OPENSTACK_ENDPOINT_TYPE = “publicURL” in local_settings.py
2. As a member role user login
3. Go to identity/Users panel or Click user name or Click Change Password row action or Submit Change Password form.

Error info:

Unauthorized:
Traceback (most recent call last):
  File "/opt/stack/horizon/openstack_dashboard/dashboards/identity/users/views.py", line 85, in get_data
    self.request.user.id)
  File "/opt/stack/horizon/openstack_dashboard/api/keystone.py", line 454, in user_get
    user = keystoneclient(request, admin=admin).users.get(user_id)
  File "/opt/stack/horizon/openstack_dashboard/api/keystone.py", line 170, in keystoneclient
    raise exceptions.NotAuthorized
NotAuthorized

wei.ying (wei.yy)
Changed in horizon:
assignee: nobody → wei.ying (wei.yy)
wei.ying (wei.yy)
summary: - Fix unauthorized exception in user page as a member user.
+ Unauthorized exception in user page as a member user.
Changed in horizon:
status: New → In Progress
wei.ying (wei.yy)
summary: - Unauthorized exception in user page as a member user.
+ Unauthorized exception in users panel as a member role user.
wei.ying (wei.yy)
description: updated
wei.ying (wei.yy)
description: updated
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to horizon (master)

Reviewed: https://review.openstack.org/458393
Committed: https://git.openstack.org/cgit/openstack/horizon/commit/?id=5d8c8fb85ba448a6076a06ad6835bcc1c6ef9ce2
Submitter: Jenkins
Branch: master

commit 5d8c8fb85ba448a6076a06ad6835bcc1c6ef9ce2
Author: wei.ying <email address hidden>
Date: Thu Apr 20 16:07:37 2017 +0800

    Fix unauthorized exception in users panel

    If a member role user login and use admin to get keystoneclient,
    but he is not a super user, then a notAuthorized exceptions will be raised,
    it seems to be unreasonable.

    The following actions will throw unauthorized exception.

    Go to Users panel, Click user name , Click Change Password,
    Submit Change Password form.

    Change-Id: I4f6486b92f023ad0daecfff51e3a1ed16b0e78c0
    Closes-Bug: #1684475

Changed in horizon:
status: In Progress → Fix Released
Changed in horizon:
milestone: none → pike-2
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/horizon 12.0.0.0b2

This issue was fixed in the openstack/horizon 12.0.0.0b2 development milestone.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.