Comment 8 for bug 1872735

Revision history for this message
Colleen Murphy (krinkle) wrote : Re: EC2 and/or credential endpoints are not protected from a scoped context

> I'm confused, why does the request contain roles list?

I find this confusing too. Let me know if you see the same behavior. I don't think it's the intended behavior but as far as I can tell it's either always been that way or has for a long time, and wasn't discovered because it used to be rare to have more than one role assignment on a project.

I think it's fixable but the patch for this bug was already getting dense. I think opening a second (public?) bug might be worthwhile.