OpenStack Identity (keystone)

Domain admin should be allowed to show their domain

Bug #1384365 reported by Nathan Kinder on 2014-10-22

This bug report is a duplicate of: Bug #1480480: keystone v3 example policy file should allow domain admin to get it's current domain. Edit Remove

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Identity (keystone)	Incomplete	Low	Nathan Kinder

Bug Description

When using the policy.v3cloudsample.json, a domain admin (possessing the 'admin' role with a domain scoped token) is not allowed to show their own domain. This operation is restricted to the cloud admin:

"identity:get_domain": "rule:cloud_admin"

The admin of a domain should be allowed to view/show their own domain.

Nathan Kinder (nkinder) on 2014-10-22

Changed in keystone:
assignee:	nobody → Nathan Kinder (nkinder)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2014-10-22: Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/130298

Changed in keystone:
status:	New → In Progress

Morgan Fainberg (mdrnstm) on 2014-10-24

Changed in keystone:
importance:	Undecided → Low

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2015-09-23: Change abandoned on keystone (master)

Change abandoned by Dolph Mathews (<email address hidden>) on branch: master
Review: https://review.openstack.org/130298
Reason: This seems to have been completely abandoned.