In v2 the set_user_password controller method call update_user, which mean that setting only 'identity:change_password' to 'rule:owner' will not works unless 'identity:update_user' is also changed to 'rule:owner' or similar.
https://github.com/openstack/keystone/blob/stable/icehouse/keystone/identity/controllers.py#L237-239
In v2 the set_user_password controller method call update_user, which mean that setting only 'identity: change_ password' to 'rule:owner' will not works unless 'identity: update_ user' is also changed to 'rule:owner' or similar.
https:/ /github. com/openstack/ keystone/ blob/stable/ icehouse/ keystone/ identity/ controllers. py#L237- 239