This commit removes system role assignments when querying keystone
for a list of assignments pertaining to a specific role. For example,
`GET /v3/role_assignments?role.id={role_id}`, now returns assignments
only for that role. Previously, the list contained false positives
because some system role assignments weren't being removed. This
was introduced in queens with the system scope work.
Reviewed: https:/ /review. openstack. org/544012 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=8748e729b2f 139c245316fcece 181625978c70a1
Committed: https:/
Submitter: Zuul
Branch: master
commit 8748e729b2f139c 245316fcece1816 25978c70a1
Author: Lance Bragstad <email address hidden>
Date: Tue Feb 13 17:09:55 2018 +0000
Fix querying role_assignment with system roles
This commit removes system role assignments when querying keystone assignments? role.id= {role_id} `, now returns assignments
for a list of assignments pertaining to a specific role. For example,
`GET /v3/role_
only for that role. Previously, the list contained false positives
because some system role assignments weren't being removed. This
was introduced in queens with the system scope work.
Change-Id: Iab35ae01bb715d a5813e62cd09900 de555dceaaa
Closes-Bug: 1748970