commit 809e5533ccdbffcc73ef9c6bda158e7f8386bb08
Author: Clenimar Filemon <email address hidden>
Date: Sat Feb 20 12:47:24 2016 -0300
Fix incorrect assumption when deleting assignments
The methods delete_user_assignments() and delete_group_assignments()
in the assignment backend remove all assignments for a user/group -
although the code fails to set the type of assignment and just uses
actor_id, making an assumption that user_id != group_id.
This patch specifies the type of assignments in the delete (i.e
USER_PROJECT/USER_DOMAIN or GROUP_PROJECT/GROUP_DOMAIN) to make sure
no assignment will be mistakenly deleted.
Reviewed: https:/ /review. openstack. org/282696 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=809e5533ccd bffcc73ef9c6bda 158e7f8386bb08
Committed: https:/
Submitter: Jenkins
Branch: master
commit 809e5533ccdbffc c73ef9c6bda158e 7f8386bb08
Author: Clenimar Filemon <email address hidden>
Date: Sat Feb 20 12:47:24 2016 -0300
Fix incorrect assumption when deleting assignments
The methods delete_ user_assignment s() and delete_ group_assignmen ts()
in the assignment backend remove all assignments for a user/group -
although the code fails to set the type of assignment and just uses
actor_id, making an assumption that user_id != group_id.
This patch specifies the type of assignments in the delete (i.e PROJECT/ USER_DOMAIN or GROUP_PROJECT/ GROUP_DOMAIN) to make sure
USER_
no assignment will be mistakenly deleted.
Change-Id: I246a61a291dd41 490f49b7b26a04f 93e69e61d7a
Closes-Bug: #1440135