commit e5b660e170170fe193e8e650a0c0f6c8e2f7a7db
Author: Henry Nash <email address hidden>
Date: Fri Nov 7 17:27:46 2014 +0000
Fix project federation tokens for inherited roles.
Currently project-scoped federation-generated tokens fail to include
group roles that are inherited to the project from the owning domain.
This error is also exposed via the /auth/projects and
/OS-FEDERATION/projects API calls. This patch patch fixes this.
(cherry picked from commit bfbe1ee96c871163e4af0eca7568e13be72b8fde)
Backport note: New tests added to test_backend_kvs.KVSIdentity
because the KVS backend didn't support the function in Juno.
Reviewed: https:/ /review. openstack. org/142548 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=e5b660e1701 70fe193e8e650a0 c0f6c8e2f7a7db
Committed: https:/
Submitter: Jenkins
Branch: stable/juno
commit e5b660e170170fe 193e8e650a0c0f6 c8e2f7a7db
Author: Henry Nash <email address hidden>
Date: Fri Nov 7 17:27:46 2014 +0000
Fix project federation tokens for inherited roles.
Currently project-scoped federation- generated tokens fail to include FEDERATION/ projects API calls. This patch patch fixes this.
group roles that are inherited to the project from the owning domain.
This error is also exposed via the /auth/projects and
/OS-
(cherry picked from commit bfbe1ee96c87116 3e4af0eca7568e1 3be72b8fde)
Backport note: New tests added to test_backend_ kvs.KVSIdentity
because the KVS backend didn't support the function in Juno.
Change-Id: I1ce50079849383 65208630ad901c7 c508c57fcd4
Closes-bug: 1389752
Closes-bug: 1385694