[api] set `is_admin` on tokens for admin project
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Wishlist
|
guoshan | ||
openstack-manuals |
Fix Released
|
Undecided
|
Ryan Selden |
Bug Description
https:/
commit e7023697a884759
Author: Adam Young <email address hidden>
Date: Sun Oct 11 23:15:52 2015 -0400
set `is_admin` on tokens for admin project
Adds two new configuration value:
admin_
admin_
If both values are set, and tokens requested for
projects (only, not domains) that match both will have an
additional value in them; `is_admin_
DocImpact
-- Configuration changes need documentation
APIImpact
-- Adds optional return values in token validation calls
SecurityImpact
-- Should be helpful in making access control decisions
Implements: blueprint is-admin-project
Partial-Bug: #968696
Change-Id: Ic9cf9862739381
tags: | added: autogenerate-config-docs |
Changed in openstack-api-site: | |
status: | New → Confirmed |
Changed in openstack-manuals: | |
status: | New → Confirmed |
affects: | openstack-api-site → keystone |
Changed in openstack-manuals: | |
assignee: | nobody → Ryan Selden (ryanx-seldon) |
Changed in openstack-manuals: | |
status: | Confirmed → In Progress |
Changed in openstack-manuals: | |
status: | Fix Committed → Fix Released |
summary: |
- set `is_admin` on tokens for admin project + [api-ref] set `is_admin` on tokens for admin project |
Changed in keystone: | |
importance: | Undecided → Low |
assignee: | Sharat Sharma (sharat-sharma) → nobody |
status: | In Progress → Confirmed |
Changed in keystone: | |
assignee: | nobody → Jeffrey Augustine (ja224e) |
summary: |
- [api-ref] set `is_admin` on tokens for admin project + [api] set `is_admin` on tokens for admin project |
Changed in keystone: | |
importance: | Low → Wishlist |
status: | Confirmed → Triaged |
Changed in keystone: | |
assignee: | nobody → guoshan (guoshan) |
Changed in keystone: | |
milestone: | none → ocata-3 |
Waiting for https:/ /review. openstack. org/310202 to get merged to avoid conflict.