admin role judge exception caused the policy to fail

Bug #1788074 reported by zhangxiaohan
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Tricircle
Fix Released
Undecided
zhangxiaohan

Bug Description

Do the following:
1. source openrc admin admin
2. openstack multiregion networking pod create --region-name CentralRegion

Error response following:

{"code": 401, "description": "Unauthorized to create pods", "title": "Unauthorized"}

Log following:
2018-08-20 18:09:50.869 ERROR tricircle.common.policy req-8e0900a7-721a-4c40-af37-87167a2c5520 None None Policy doesn't allow this operation to be performed., admin_api:pods:create, {'project_id': None, 'user_id': None}: PolicyNotAuthorized: Policy doesn't allow this operation to be performed.
2018-08-20 18:09:50.869 TRACE tricircle.common.policy Traceback (most recent call last):
2018-08-20 18:09:50.869 TRACE tricircle.common.policy File "/opt/stack/tricircle/tricircle/common/policy.py", line 288, in enforce
2018-08-20 18:09:50.869 TRACE tricircle.common.policy do_raise=True, exc=exc, *args, **kwargs)
2018-08-20 18:09:50.869 TRACE tricircle.common.policy File "/usr/local/lib/python2.7/dist-packages/oslo_policy/policy.py", line 878, in enforce
2018-08-20 18:09:50.869 TRACE tricircle.common.policy raise exc(*args, **kwargs)
2018-08-20 18:09:50.869 TRACE tricircle.common.policy PolicyNotAuthorized: Policy doesn't allow this operation to be performed.

Changed in tricircle:
assignee: nobody → zhangxiaohan (zhangxh502)
status: New → Confirmed
Changed in tricircle:
status: Confirmed → New
Revision history for this message
baisen (song1) wrote :
Changed in tricircle:
status: New → Fix Committed
baisen (song1)
Changed in tricircle:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.