Comment 23 for bug 1166670

Revision history for this message
Thierry Carrez (ttx) wrote : Re: Deleted user can still create instances

We need another keystone-core +1 on the patch

Could you produce a patch for stable/grizzly ? (and stable/folsom if that's affected as well)

About impact, let me make sure I understand this correctly: when users are deleted, their existing tokens are not invalidated, so they stay valid for the duration of the token life ? What is the default lifetime for a token ? Which types of tokens are affected ?