** Changed in: keystone
Status: Fix Committed => Fix Released
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1485104
Title:
Redundant rule:cloud_admin in list_role_assignments v3 policy file
Status in Keystone:
Fix Released
Bug description:
policy.v3cloudsample.json contains the following three lines :
"admin_on_domain_filter" : "rule:cloud_admin or (rule:admin_required and
domain_id:%(scope.domain.id)s)",
"admin_on_project_filter" : "rule:cloud_admin or (rule:admin_required and
project_id:%(scope.project.id)s)",
"identity:list_role_assignments": "rule:admin_on_domain_filter or
rule:admin_on_project_filter",
With rule:cloud_admin being included in both sub-rules, it is then
included twice within the final rule. The two sub-rules are currently
only utilized in the one location.
To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1485104/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp