OpenStack Security Advisory

  1. Bug #1064914
  2. Comment #14

Comment 14 for bug 1064914

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (stable/folsom)

Reviewed: https://review.openstack.org/16304
Committed: http://github.com/openstack/keystone/commit/37308dd4f3e33f7bd0f71d83fd51734d1870713b
Submitter: Jenkins
Branch: stable/folsom

commit 37308dd4f3e33f7bd0f71d83fd51734d1870713b
Author: Vishvananda Ishaya <email address hidden>
Date: Tue Nov 13 15:49:19 2012 -0800

    Ensures User is member of tenant in ec2 validation

    It is possible that a user is no longer a member of a tenant when
    they attempt to use an ec2 token. This checks to make sure that
    the user still has at least one valid role in the tenant before
    authenticating them. This should automatically work for the s3
    version as well since it is a subclass.

    Fixes bug 1064914

    Change-Id: Ieb237bae936a7b00ce7ba4d4c59aec6c7a69ec21