Domain show command should not use require list domains

[Nathan Kinder]

Similar to bug 1378565, a 'domain show' command attempts to look up the specified domain by doing a 'domain list' behind the scenes. A user who is allowed to show their domain (such as the admin of a domain) might not be allowed to list all domains. In this case, the user will encounter a 403. There are proposed changes to make this the normal v3 policy for Keystone:

  https://bugs.launchpad.net/keystone/+bug/1384365

We should allow a 'domain show' to work without attempting to list the domains

[Nathan Kinder (nkinder)]

Actually, this is working properly if a domain id is specified (versus a name). Closing as invalid.

[Nathan Kinder (nkinder)]

Here are details showing that this is working correctly:

[rhosuser@rhos ~(keystone_ipa_admin)]$ openstack domain show 038945faee6b4b0e8cc9f50d3e83013e
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | ipa |
| enabled | True |
| id | 038945faee6b4b0e8cc9f50d3e83013e |
| name | ipa |
+-------------+----------------------------------+
[rhosuser@rhos ~(keystone_ipa_admin)]$ openstack domain show ipa
ERROR: openstack You are not authorized to perform the requested action: identity:list_domains (HTTP 403)