/auth/domains does not necessarily return a distinct list

[Henry Nash]

The underlying code list_domains_for_user() does not (unlike the project equivalent) attempt to filter out duplicates (which would happen if a user had, say, a direct role and a group role, or multiple inherited roles). In all our APIs that return entities based on their effective assignments, we try and make sure we return a distinct list.

[Henry Nash (henry-nash)]

This is one in a series of defects I found by code inspection while producing a WIP code example for https://review.openstack.org/#/c/129397/. See for the WIP code: https://review.openstack.org/#/c/130954/

[Steve Martinelli (stevemar)]

unassigning due to inactivity

[Steve Martinelli (stevemar)]

With the migration to using role assignments, I believe this is no longer valid?

[David Stanek (dstanek)]

Is this actually taken care of by http://git.openstack.org/cgit/openstack/keystone/tree/keystone/assignment/core.py?id=05c58bb#n244 ?

[Henry Nash (henry-nash)]

Yep, I agree - that did fix this issue. I'll mark it as fixed.

[Steve Martinelli (stevemar)]

marking as released