two users can be created with the same "name"
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Critical
|
Vish Ishaya |
Bug Description
(redux branch)
keystone-manage allows two users to be created with the same "name". It creates separate IDs, but the "username" doesn't have a uniqueness constraint applied to it.
(dox)$ bin/keystone-manage user create name=admin password=fred email=2
{"name": "admin", "enabled": true, "tenantId": null, "id": "e3113d8a870544
(.venv)
(dox)$ bin/keystone-manage user create name=admin password=harry email=3
{"name": "admin", "enabled": true, "tenantId": null, "id": "44b1ffcf194248
(.venv)
tags: | added: low-hanging-fruit |
Changed in keystone: | |
importance: | Undecided → Medium |
summary: |
- keystone-manage (ksl) allows two users to be created with the same - "name" + keystone-manage allows two users to be created with the same "name" |
summary: |
- keystone-manage allows two users to be created with the same "name" + two users can be created with the same "name" |
Changed in keystone: | |
assignee: | nobody → Vish Ishaya (vishvananda) |
importance: | Medium → Critical |
Changed in keystone: | |
status: | New → In Progress |
Changed in keystone: | |
status: | In Progress → Fix Committed |
Changed in keystone: | |
milestone: | none → essex-4 |
Changed in keystone: | |
status: | Fix Committed → Fix Released |
Changed in keystone: | |
milestone: | essex-4 → 2012.1 |
recommend writing unittests against the internal backend apis, as per test_backend.py to make sure this throws errors, and then we can make sure the backends implement them