Delete role not implemented on assignment LDAP backend

Bug #1248952 reported by Marcos Lobo
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Wishlist
Adam Young

Bug Description

Delete role action is not implemented on the assignment LDAP backend in Havana release. Otherwise, other role functions are implemented.

When you try:

curl -X DELETE --insecure -H "X-Auth-Token:the_token" https://localhost:35357/v3/roles/role_id

Keystone raises warning message: "The action you have requested has not been implemented."

The problem is "assignment/ldap" backend is not implementing list_role_assignments function, so python search up in the hierachy and arrives to assignment/core.py list_role_assignments fucntion and raises the NotimplementedException.

Changed in keystone:
assignee: nobody → Marcos Lobo (marcos-fermin-lobo)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/55638

Changed in keystone:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote :

Fix proposed to branch: master
Review: https://review.openstack.org/55639

Dolph Mathews (dolph)
Changed in keystone:
importance: Undecided → Wishlist
Revision history for this message
Dolph Mathews (dolph) wrote :

Obviously there's already a (near trivial) patch available to resolve this bug, but this comment also applies here, unless someone is invested enough in this deployment pattern to support this approach keystone:

  https://bugs.launchpad.net/keystone/+bug/1251678/comments/1

Revision history for this message
Marcos Lobo (marcos-fermin-lobo) wrote :
Changed in keystone:
assignee: Marcos Lobo (marcos-fermin-lobo) → Adam Young (ayoung)
Changed in keystone:
assignee: Adam Young (ayoung) → Dolph Mathews (dolph)
Changed in keystone:
assignee: Dolph Mathews (dolph) → Adam Young (ayoung)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/56940
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=829a2349312c2c294df22c55c76fb0b0afda200f
Submitter: Jenkins
Branch: master

commit 829a2349312c2c294df22c55c76fb0b0afda200f
Author: Marcos Lobo <email address hidden>
Date: Mon Nov 18 14:59:46 2013 +0100

    LDAP Assignment does not support grant v3 API

    The LDAP assignment backend is missing support for several of the v3
    APIs. This patch implements Role Grant CRUD for V3 Assignment API:

    - Role Grant CRUD
      + create_grant
      + get_grant
      + delete_grant
      + update_grant

    - GET /role_assignments
      + list_role_assignments

    Closes-Bug: #1248952
    Partial-Bug: #1101287
    Partial-Bug: #1221805

    Change-Id: I1fb247b538e6a11085a18f0103cb8508d58e664f

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → icehouse-2
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: icehouse-2 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.