OpenStack Identity (keystone)

  1. Bug #1805368
  2. Comment #40

Comment 40 for bug 1805368

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to keystone (stable/stein)

Reviewed: https://review.openstack.org/647815
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=933b7509a4177680158baeeb582f82470f73ae38
Submitter: Zuul
Branch: stable/stein

commit 933b7509a4177680158baeeb582f82470f73ae38
Author: Lance Bragstad <email address hidden>
Date: Fri Mar 22 21:25:07 2019 +0000

    Make system admin policies consistent for grants

    This commit adjust the create and revoke grant policies to be
    consistent with other system admin policy check strings by not using
    the rule:admin_required check string and by including system_scope:all
    in the rule itself.

    Subsequent patches will:

     - implement domain reader and member support
     - implement domain admin support
     - introduce test coverage for project users and the grants API
     - remove redundant policies from policy.v3cloudsample.json

    Related-Bug: 1805368
    Related-Bug: 1750669
    Related-Bug: 1806762

    Change-Id: Idcbe16f643332d80af716074cf3ea22525d465a9
    (cherry picked from commit ef838a3a3f575562b1fc84623c3a8491d4f2e2f4)