skyline filter role member instead of _member

[Satish Patel]

I have deployed skyline on Zed release. When I tried to login using non-admin account (normal user) I got error

{
  "message": "You don't have access to get instances.",
  "status": 401
}

After spending many hours I found skyline filtering role based on member name instead of _member_

# openstack role assignment list --user spatel --project customer_a --names
+----------+----------------+-------+--------------------+--------+--------+-----------+
| Role | User | Group | Project | Domain | System | Inherited |
+----------+----------------+-------+--------------------+--------+--------+-----------+
| _member_ | spatel@Default | | customer_a@Default | | | False |
+----------+----------------+-------+--------------------+--------+--------+-----------+

I have all my users in _member_ roles.

Solution:

# openstack role add --project customer_a --user spatel --user-domain Default member

(venv-kolla) root@kolla-infra-1:~# openstack role assignment list --user spatel --project customer_a --names
+----------+----------------+-------+--------------------+--------+--------+-----------+
| Role | User | Group | Project | Domain | System | Inherited |
+----------+----------------+-------+--------------------+--------+--------+-----------+
| _member_ | spatel@Default | | customer_a@Default | | | False |
| member | spatel@Default | | customer_a@Default | | | False |
+----------+----------------+-------+--------------------+--------+--------+-----------+

Question: How do I fix this in skyline or skyline has option of filter to look for specfic role name.

[Wu Wenxiang (wu-wenxiang)]

Cool, appreciate!

[Satish Patel (satish-txt)]

Any update here?

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/skyline-apiserver/+/895777

[Satish Patel (satish-txt)]

Thank you so much!!

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/skyline-apiserver/+/895777
Committed: https://opendev.org/openstack/skyline-apiserver/commit/87019798faa5d18d2409083c448b792cf83252a5
Submitter: "Zuul (22348)"
Branch: master

commit 87019798faa5d18d2409083c448b792cf83252a5
Author: yangshaoxue <[e-mail]>
Date: Tue Sep 19 17:28:45 2023 +0800

    fix: Compatible with member and _member_

    When the default role is _member_ instead of member, the Skyline API response 401

    Bug: 2034976
    Change-Id: I7c633728c8de9f300eb718f615bc9950e0c96411

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/2023.2
Review: https://review.opendev.org/c/openstack/skyline-apiserver/+/895800

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.opendev.org/c/openstack/skyline-apiserver/+/895800
Committed: https://opendev.org/openstack/skyline-apiserver/commit/bf0d82aed64cddd70eacbd08f51d79b7d20d0d1c
Submitter: "Zuul (22348)"
Branch: stable/2023.2

commit bf0d82aed64cddd70eacbd08f51d79b7d20d0d1c
Author: yangshaoxue <[e-mail]>
Date: Tue Sep 19 17:28:45 2023 +0800

    fix: Compatible with member and _member_

    When the default role is _member_ instead of member, the Skyline API response 401

    Bug: 2034976
    Change-Id: I7c633728c8de9f300eb718f615bc9950e0c96411
    (cherry picked from commit 87019798faa5d18d2409083c448b792cf83252a5)