Make user properties editable by end-user

[Tres Henry]

An end-user should be able to edit the properties of their own user (email, password, possibly default tenant, possibly username).

This requires API support in Keystone, and a new Settings dashboard panel in Horizon.

[Gabriel Hurley (gabriel-hurley)]

Bumping to 2012.1 since there isn't a patch yet.

[Tres Henry (tres)]

This depends on support from keystone which isn't going to exist in Essex.

[Joseph Heck (heckj)]

marking as wishlist - requires V3 API and clear policy rules on the keystone side, assuming that the back-end identity plugin supports that functionality (i.e. isn't read-only)

[Julie Pichon (jpichon)]

The keystone client now allows users to change their own password (https://bugs.launchpad.net/python-keystoneclient/+bug/1082539). It sounds worthwhile implementing on its own in Horizon, even if the other properties can't all be edited yet.

[Dolph Mathews (dolph)]

The v3 API is designed with users editing their own attributes in mind (such as password and default_project_id).

  https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md

The details of authorization are left to policy.json. Implementation merged during grizzly.

[Zhenguo Niu (niu-zglinux)]

 Allow users to change their passwords: https://review.openstack.org/23901

[Julie Pichon (jpichon)]

Since there is already a blueprint for changing your own password that is implemented by this review, I think this bug should be left open for someone to implement editing of the other attributes (email, etc.) in the future.

[shake.chen (shake-chen)]

Now the user modify the Language at settting, it work, but after logout and login again, it is not change.

I think the user language setting have not save in keystone user.

[Tomas Sedovic (tsedovic)]

It seems that a non-admin user cannot change their username and email. Using devstack:

$ source openrc demo demo

$ keystone user-update --name demo2 demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)

$ keystone user-update --email <email address hidden> demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)

I'm not sure about the impact of changing one's username but the users should surely be able to update their email address. I didn't find any relevant Keystone blueprints -- should I submit one?

[Tomas Sedovic (tsedovic)]

I'm sorry. I read the full thread and yet I missed Keystone v3 API discussion, please disregard my previous comment.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/51580

[Julie Pichon (jpichon)]

Please do not change bug statuses to "Fix Committed", this is done automatically by Gerrit. The linked patch in this case is abandoned andn ot merged, it seems the APIs still do no let us easily do this currently.

[Julie Pichon (jpichon)]

Patch at https://review.openstack.org/#/c/99875

[Nikunj Aggarwal (nikunj2512)]

Still have to work with keystone team to support password change for end users.

[Julie Pichon (jpichon)]

Self-password change is ok and implemented in both Keystone v2/v3 and Horizon. There is no Keystone API for modifying user properties yet though, AFAIK. Comment #5 suggests it's implemented but I don't think it's fine-grained enough, if I understand it correctly (it would reopen the security issue from bug 1237989).

[Rob Cresswell (robcresswell-deactivatedaccount)]

Removed Assignee. No update in ~10 months.

[OpenStack Infra (hudson-openstack)]

Change abandoned by Matthias Runge (<email address hidden>) on branch: master
Review: https://review.openstack.org/99875
Reason: no change here for the last 6 months. Feel free to restore, if you want to work on this patch.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/265310

[OpenStack Infra (hudson-openstack)]

Change abandoned by Itxaka Serrano Garcia (<email address hidden>) on branch: master
Review: https://review.openstack.org/265310