Test domain and project users against group system assignment API
This commit ensures that domain and project users are not able to
operate on system role assignments for groups in anyway since they
lack the proper authorization to do so.
Subsequent patches will:
- remove obsolete policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/647680 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=56e48127938 be2d67b984d00b1 55833532233713
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit 56e48127938be2d 67b984d00b15583 3532233713
Author: Lance Bragstad <email address hidden>
Date: Thu Mar 21 18:54:06 2019 +0000
Test domain and project users against group system assignment API
This commit ensures that domain and project users are not able to
operate on system role assignments for groups in anyway since they
lack the proper authorization to do so.
Subsequent patches will:
- remove obsolete policies from policy. v3cloudsample. json
Change-Id: I696e5d161fae7e fbc208355372bf7 bf09f96849f da7137a406fb8cb 2e3da931ca)
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762
(cherry picked from commit 6e118bad3d49bc1