** Changed in: keystone
       Status: Fix Committed => Fix Released

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to Keystone.
https://bugs.launchpad.net/bugs/1485104

Title:
  Redundant rule:cloud_admin in list_role_assignments v3 policy file

Status in Keystone:
  Fix Released

Bug description:
  policy.v3cloudsample.json contains the following three lines :

      "admin_on_domain_filter" : "rule:cloud_admin or (rule:admin_required and 
domain_id:%(scope.domain.id)s)",
      "admin_on_project_filter" : "rule:cloud_admin or (rule:admin_required and 
project_id:%(scope.project.id)s)",
      "identity:list_role_assignments": "rule:admin_on_domain_filter or 
rule:admin_on_project_filter",

  With rule:cloud_admin being included in both sub-rules, it is then
  included twice within the final rule. The two sub-rules are currently
  only utilized in the one location.

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1485104/+subscriptions

-- 
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to     : [email protected]
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help   : https://help.launchpad.net/ListHelp

Reply via email to