OpenStack Identity (keystone)

Federation list projects endpoint does not honor project inherited role assignments

Bug #1424500 reported by Samuel de Medeiros Queiroz
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Medium
Samuel de Medeiros Queiroz
OpenStack Identity (keystone) 2015.1.0 "kilo"

Bug Description

'/OS-FEDERATION/projects' and '/auth/projects' API endpoints do not honor project inherited group role assignments.

See original description
Tags: federation
Samuel de Medeiros Queiroz (samueldmq)
summary: - Federation does not honor project inherited role assignments
+ /OS-FEDERATION/projects does not honor project inherited role
+ assignments
Changed in keystone:
assignee: nobody → Samuel de Medeiros Queiroz (samueldmq)
description: updated
Samuel de Medeiros Queiroz (samueldmq)
summary: - /OS-FEDERATION/projects does not honor project inherited role
+ Federation list projects endpoint does not honor project inherited role
assignments
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to keystone (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/158163

Morgan Fainberg (mdrnstm)
Changed in keystone:
status: New → Triaged
Morgan Fainberg (mdrnstm)
Changed in keystone:
importance: Undecided → Medium
Lance Bragstad (lbragstad)
tags: added: federation
Changed in keystone:
milestone: none → kilo-rc1
Revision history for this message
Steve Martinelli (stevemar) wrote :

I don't see how this one can land in kilo when the proposed patch depends on 4 other patches which depend on bp list-role-assignments-performance (which is targeted to liberty).

Either rebase the patch to master or retarget the bug.

Revision history for this message
Steve Martinelli (stevemar) wrote :

The proposed patch only Relates to the bug, does not Close. Furthermore, it does not change any federation specific code, it just adds tests.

Morgan Fainberg (mdrnstm)
Changed in keystone:
milestone: kilo-rc1 → none
Revision history for this message
Steve Martinelli (stevemar) wrote :

samueldmq to pick out the relevant bits of code and rebase it against master, hoping to land in kilo

Changed in keystone:
milestone: none → kilo-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/169113

Changed in keystone:
status: Triaged → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to keystone (master)

Reviewed: https://review.openstack.org/158163
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=51317c80836ea63e4a6ca39c92c97927e8a9733e
Submitter: Jenkins
Branch: master

commit 51317c80836ea63e4a6ca39c92c97927e8a9733e
Author: Samuel de Medeiros Queiroz <email address hidden>
Date: Sun Feb 22 23:05:20 2015 -0300

    Exposes bug in Federation list projects endpoint

    '/OS-FEDERATION/projects' and '/auth/projects'
    API endpoints do not honor project inherited
    group role assignments.

    This patch exposes this bug and a follow-on patch
    will fix it.

    Related-Bug: #1424500

    Change-Id: Idd6827bc5552192f04de19e8a78fb462bdde380f

Changed in keystone:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/169113
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=93587bf1683ae9d9e764ca51113dabe71cef7521
Submitter: Jenkins
Branch: master

commit 93587bf1683ae9d9e764ca51113dabe71cef7521
Author: Samuel de Medeiros Queiroz <email address hidden>
Date: Mon Mar 30 19:32:47 2015 -0300

    Fixes bug in Federation list projects endpoint

    '/OS-FEDERATION/projects' and '/auth/projects'
    API endpoints did not honor project inherited
    group role assignments.

    This patch fixed this bug.

    Closes-Bug: #1424500

    Change-Id: I4937289362122952d1b3e1b73c5712601c675bb4

Thierry Carrez (ttx)
Changed in keystone:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: kilo-rc1 → 2015.1.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.