Reviewed: https://review.opendev.org/667730 Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=bbd77d0bf9dde57e5ca5d53f7214df85713b9f1e Submitter: Zuul Branch: master
commit bbd77d0bf9dde57e5ca5d53f7214df85713b9f1e Author: Lance Bragstad <[email protected]> Date: Wed Jun 26 20:54:22 2019 +0000 Implement domain admin support for grants This commit goes through and updates grant policies to allow domain administrator to manager grants for their domains and projects within thier domain. Co-Authored-By: Colleen Murphy <[email protected]> Change-Id: I5f1839a3f8d23d17e449aa9f8710d70233ee8fcc Closes-Bug: 1805368 Closes-Bug: 1750669 ** Changed in: keystone Status: In Progress => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1805368 Title: Grant API doesn't use default roles Status in OpenStack Identity (keystone): Fix Released Bug description: In Rocky, keystone implemented support to ensure at least three default roles were available [0]. The grant API doesn't incorporate these defaults into its default policies [1], but it should. [0] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/rocky/define-default-roles.html [1] http://git.openstack.org/cgit/openstack/keystone/tree/keystone/common/policies/grant.py?id=fb73912d87b61c419a86c0a9415ebdcf1e186927 To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1805368/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
