https://bugzilla.wikimedia.org/show_bug.cgi?id=26595

           Summary: Add users to sysadmin role after they are added to a
                    project
           Product: MediaWiki extensions
           Version: any
          Platform: All
        OS/Version: All
            Status: NEW
          Severity: enhancement
          Priority: Normal
         Component: OpenStackManager
        AssignedTo: rlan...@gmail.com
        ReportedBy: rlan...@gmail.com


Adding a user to a project is not enough to allow them to create instances.
Users must also be in a "sysadmin" role as well.

Project roles are created underneath projects. So, if a project exists named
"tesla", the project/role should look like this:

cn=tesla,<projectbasedn>

cn=sysadmin,cn=tesla,<projectbasedn>

Also, as of right now, Nova requires that users be in the global sysadmin
group, and the project group to create instances; see bug:

https://bugs.launchpad.net/nova/+bug/697936

So, for now at least, we'll also need to add users to this group when they are
created.

Also, if we are adding users to these roles, when we remove users from
projects, they should also be removed from the roles as well.

When the listed Nova bug is fixed, we'll need to stop using the global group
(this should preferably be a configuration option), and we'll need to remove
all users from the group.

-- 
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are on the CC list for the bug.

_______________________________________________
Wikibugs-l mailing list
Wikibugs-l@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l

Reply via email to