keystone v3 example policy file should allow domain admin to get it's current domain

Bug #1480480 reported by Dan Nguyen
14
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Wishlist
Dan Nguyen

Bug Description

The example keystone v3 policy file should allow domain admin to get it's domain.

https://github.com/openstack/keystone/blob/master/etc/policy.v3cloudsample.json#L32

- "identity:get_domain": "rule:cloud_admin",
+ "identity:get_domain": "rule:cloud_admin or rule:admin_and_matching_domain_id",

From horizon this will give the Domain Admin a read only view of the Domain containing the following data.

Name Description Domain ID Enabled

Changed in keystone:
assignee: nobody → Dan Nguyen (daniel-a-nguyen)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/208082

Changed in keystone:
status: New → In Progress
Dolph Mathews (dolph)
Changed in keystone:
importance: Undecided → Wishlist
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/208082
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=1d39b590b85874bedd52a3a11436c1bfe0119d40
Submitter: Jenkins
Branch: master

commit 1d39b590b85874bedd52a3a11436c1bfe0119d40
Author: daniel-a-nguyen <email address hidden>
Date: Fri Jul 31 16:14:28 2015 -0700

    Allow Domain Admin to get domain details

    This will give Domain Admin the ability to retrieve the details
    for it's domain.

    Change-Id: Ia82aaa686a7381be0b3f46c1d90658c1f1e1167d
    Closes-Bug: #1480480

Changed in keystone:
status: In Progress → Fix Committed
Changed in keystone:
milestone: none → liberty-3
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: liberty-3 → 8.0.0
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.