deleting role with implied role fails

[Adam Young]

Create two roles. Make one imply the other (need curl for now)

$ openstack role delete identity_policy_manager
ERROR: openstack An unexpected error prevented the server from fulfilling your request. (HTTP 500) (Request-ID: req-a2b89f42-ad24-4985-a599-33cc182d8f80)

Looking in the log

Feb 17 14:05:44 ayoung541 admin: 2016-02-17 14:05:44.042 31 ERROR keystone.common.wsgi [req-a2b89f42-ad24-4985-a599-33cc182d8f80 6259462f07a940f19b1ad8d36ee42612 b0fa955539c442cc838067a55605102d - default default] (pymysql.err.IntegrityError) (1451, u'Cannot delete or update a parent row: a foreign key constraint fails (`keystone`.`implied_role`, CONSTRAINT `implied_role_prior_role_id_fkey` FOREIGN KEY (`prior_role_id`) REFERENCES `role` (`id`))') [SQL: u'DELETE FROM role WHERE role.id = %(id)s'] [parameters: {'id': u'142340f53b624665a86641cf13135615'}]

This is supposed to be a cascading delete.

[Alexander Makarov (amakarov)]

Looks like we need to pay attention to cascading deletion: http://docs.sqlalchemy.org/en/latest/orm/cascades.html

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/281921

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/281921
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=15ca0f27f13031afa591e1c07846bd1fe9d92b15
Submitter: Jenkins
Branch: master

commit 15ca0f27f13031afa591e1c07846bd1fe9d92b15
Author: Alexander Makarov <email address hidden>
Date: Thu Feb 18 18:57:40 2016 +0300

    Implied roles index with cascading delete

    Currently, when deleting a role that has an implied role, only one
    is removed from the database. This is because the initial FKs that
    were created did not take delete and update into account.

    Change-Id: I09ef96cf9e4a863337399ae880e0511125f5239c
    Closes-Bug: 1546562

[Thierry Carrez (ttx)]

This issue was fixed in the openstack/keystone 9.0.0.0b3 development milestone.