Public bug reported: When you setup a user with a role assignment on a domain and then a role assignment on a project "acting as a domain", you can't actually remove them. The following pastes sets up the environment:
http://paste.openstack.org/show/695978/ Which results in the following when a user tries to remove either of those assignments: http://paste.openstack.org/show/696013/ And the resulting trace: http://paste.openstack.org/show/695994/ It appears the issue is because the somewhere in the assignment code we're only expecting a single assignment to be returned for us to delete, which isn't the case here and causes ambiguity. ** Affects: keystone Importance: High Status: Triaged ** Changed in: keystone Status: New => Triaged ** Changed in: keystone Importance: Undecided => High -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1754677 Title: Unable to remove an assignment from domain and project Status in OpenStack Identity (keystone): Triaged Bug description: When you setup a user with a role assignment on a domain and then a role assignment on a project "acting as a domain", you can't actually remove them. The following pastes sets up the environment: http://paste.openstack.org/show/695978/ Which results in the following when a user tries to remove either of those assignments: http://paste.openstack.org/show/696013/ And the resulting trace: http://paste.openstack.org/show/695994/ It appears the issue is because the somewhere in the assignment code we're only expecting a single assignment to be returned for us to delete, which isn't the case here and causes ambiguity. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1754677/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
