Test domain and project users against group system assignment API
This commit ensures that domain and project users are not able to
operate on system role assignments for groups in anyway since they
lack the proper authorization to do so.
Subsequent patches will:
- remove obsolete policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/645311 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=6e118bad3d4 9bc1da7137a406f b8cb2e3da931ca
Committed: https:/
Submitter: Zuul
Branch: master
commit 6e118bad3d49bc1 da7137a406fb8cb 2e3da931ca
Author: Lance Bragstad <email address hidden>
Date: Thu Mar 21 18:54:06 2019 +0000
Test domain and project users against group system assignment API
This commit ensures that domain and project users are not able to
operate on system role assignments for groups in anyway since they
lack the proper authorization to do so.
Subsequent patches will:
- remove obsolete policies from policy. v3cloudsample. json
Change-Id: I696e5d161fae7e fbc208355372bf7 bf09f96849f
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762