| 2018-05-31 19:35:34 |
Lance Bragstad |
description |
When you setup a user with a role assignment on a domain and then a role assignment on a project "acting as a domain", you can't actually remove them. The following pastes sets up the environment:
http://paste.openstack.org/show/695978/
Which results in the following when a user tries to remove either of those assignments:
http://paste.openstack.org/show/696013/
And the resulting trace:
http://paste.openstack.org/show/695994/
It appears the issue is because the somewhere in the assignment code we're only expecting a single assignment to be returned for us to delete, which isn't the case here and causes ambiguity. |
When you setup a user with a role assignment on a domain and then a role assignment on a project "acting as a domain", you can't actually remove them. The following pastes sets up the environment:
http://paste.openstack.org/show/695978/
Which results in the following when a user tries to remove either of those assignments:
http://paste.openstack.org/show/696013/
And the resulting trace:
http://paste.openstack.org/show/695994/
It appears the issue is because somewhere in the assignment code we're only expecting a single assignment to be returned for us to delete, which isn't the case here and causes ambiguity. |
|
