GET /roles/{role_id}/users does not work as advertised

Bug #1183433 reported by Henry Nash on 2013-05-23
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Medium
Henry Nash

Bug Description

The v3 api describes this api as follows:

List users with a role: GET /roles/{role_id}/users

query_string: page (optional) query_string: per_page (optional, default 30) query filter for "name", "enabled", "email" (optional)

Response:

Status: 200 OK

[
    {
        "default_project_id": "--default-project-id--",
        "description": "a user",
        "domain_id": "--domain-id--",
        "email": "...",
        "enabled": true,
        "id": "--user-id--",
        "links": {
            "self": "http://identity:35357/v3/users/--user-id--"
        },
        "name": "admin"
    },
    {
        "default_project_id": "--default-project-id--",
        "description": "another user",
        "domain_id": "--domain-id--",
        "email": "...",
        "enabled": true,
        "id": "--user-id--",
        "links": {
            "self": "http://identity:35357/v3/users/--user-id--"
        },
        "name": "someone"
    }
]

In reality we don't support this call in either the v2 or v3 apis - and it was meant to have been removed I think as part of the move away from global roles. Unlike the related bug for GET /user/{user_id}/roles (https://bugs.launchpad.net/keystone/+bug/1183430 - which I think we should still support), I am not sure we really should continue to support the call above. If we did, then the output would need to somehow contain the target of the assignment.

Dolph Mathews (dolph) wrote :
Changed in keystone:
status: New → Confirmed
importance: Undecided → Medium
assignee: nobody → Dolph Mathews (dolph)
status: Confirmed → In Progress
Henry Nash (henry-nash) on 2013-07-02
Changed in keystone:
milestone: none → havana-2
Henry Nash (henry-nash) on 2013-07-07
Changed in keystone:
assignee: Dolph Mathews (dolph) → Henry Nash (henry-nash)
Henry Nash (henry-nash) wrote :

This api call is no longer supported (and should have been removed from the API specification). A more generic API call that enables the same function is provided (GET /role_assignments) from Identity version 3.1 onwards.

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx) on 2013-07-17
Changed in keystone:
status: Fix Committed → Fix Released
Thierry Carrez (ttx) on 2013-10-17
Changed in keystone:
milestone: havana-2 → 2013.2
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers