| 2014-11-28 13:13:08 |
Rodrigo Duarte |
bug |
|
|
added bug |
| 2014-11-28 13:18:43 |
OpenStack Infra |
keystone: status |
New |
In Progress |
|
| 2014-11-28 13:18:43 |
OpenStack Infra |
keystone: assignee |
|
Rodrigo Duarte (rodrigodsousa) |
|
| 2014-12-05 20:33:03 |
Brant Knudson |
summary |
Wront return code for inherited role checking |
Wrong return code for inherited role checking |
|
| 2014-12-16 10:52:44 |
Rodrigo Duarte |
summary |
Wrong return code for inherited role checking |
Wrong return code for inherited domain role checking |
|
| 2015-01-15 20:25:23 |
Rodrigo Duarte |
summary |
Wrong return code for inherited domain role checking |
Wrong return code for inherited project role checking |
|
| 2015-01-15 20:27:14 |
Rodrigo Duarte |
description |
As per https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-inherit-ext.rst#check-if-user-has-an-inherited-project-role-on-domain, HEAD /OS-INHERIT/domains/{domain_id}/users/{user_id}/roles/{role_id}/inherited_to_projects returns "204 No Content", but the correct return is "200":
curl --verbose -X HEAD -H "X-Auth-Token:$TOKEN" "http://localhost:5000/v3/OS-INHERIT/domains/default/users/dd55a1c1c05842c29b50ef8ecce681a7/roles/inherited_to_projects"
* Hostname was NOT found in DNS cache
* Trying 127.0.1.1...
* Connected to localhost (127.0.1.1) port 5000 (#0)
> HEAD /v3/OS-INHERIT/domains/default/users/dd55a1c1c05842c29b50ef8ecce681a7/roles/inherited_to_projects HTTP/1.1
> User-Agent: curl/7.35.0
> Host: localhost:5000
> Accept: */*
> X-Auth-Token:9c87d13fa15d41549f634bd06f4551b4
>
< HTTP/1.1 200 OK
< Date: Fri, 28 Nov 2014 12:59:10 GMT
* Server Apache/2.4.7 (Ubuntu) is not blacklisted
< Server: Apache/2.4.7 (Ubuntu)
< Vary: X-Auth-Token
< Content-Length: 334
< Content-Type: application/json |
The documentation states that the return code to check inherited roles do projects is 200 OK [1], which isn't true (see comments below). All check grants are done via the same method.
https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-inherit-ext.rst#check-if-user-has-an-inherited-project-role-on-project |
|
| 2015-01-15 20:28:23 |
Rodrigo Duarte |
description |
The documentation states that the return code to check inherited roles do projects is 200 OK [1], which isn't true (see comments below). All check grants are done via the same method.
https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-inherit-ext.rst#check-if-user-has-an-inherited-project-role-on-project |
The documentation states that the return code to check inherited roles do projects is 200 OK [1], which isn't true (see comments below). All grant checks are done via the same method.
https://github.com/openstack/keystone-specs/blob/master/api/v3/identity-api-v3-os-inherit-ext.rst#check-if-user-has-an-inherited-project-role-on-project |
|
| 2015-04-14 19:27:59 |
Lin Hua Cheng |
keystone: importance |
Undecided |
Low |
|
| 2015-06-26 19:52:19 |
Rodrigo Duarte |
keystone: assignee |
Rodrigo Duarte (rodrigodsousa) |
|
|
| 2016-02-21 06:55:04 |
Steve Martinelli |
keystone: status |
In Progress |
Invalid |
|
