commit dd785ee692118a56ea0e3aaaf7f5bd6c73ea9c91
Author: Markus Hentsch <email address hidden>
Date: Fri Nov 3 10:43:34 2023 +0100
Add domain scoping to list_domains
Introduces domain-scoped filtering of the response list of the
list_domains endpoint when the user is authenticated in domain scope
instead of returning all domains. This aligns the implementation with
other endpoints like list_projects or list_groups and allows for a
domain-scoped reader role.
Changes the default policy rule for identity:list_domains to
incorporate this new behavior for the reader role.
Reviewed: https:/ /review. opendev. org/c/openstack /keystone/ +/900028 /opendev. org/openstack/ keystone/ commit/ dd785ee692118a5 6ea0e3aaaf7f5bd 6c73ea9c91
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit dd785ee692118a5 6ea0e3aaaf7f5bd 6c73ea9c91
Author: Markus Hentsch <email address hidden>
Date: Fri Nov 3 10:43:34 2023 +0100
Add domain scoping to list_domains
Introduces domain-scoped filtering of the response list of the list_domains to
list_domains endpoint when the user is authenticated in domain scope
instead of returning all domains. This aligns the implementation with
other endpoints like list_projects or list_groups and allows for a
domain-scoped reader role.
Changes the default policy rule for identity:
incorporate this new behavior for the reader role.
Closes-Bug: 2041611 060cce840fc904b ae17f1503a9
Change-Id: I8ee50efc3b4850