openstack
/
deb-keystone
Code Issues Proposed changes
deb-keystone/keystone/tests/unit
History
Steve Martinelli ef48072d94 Fix cloud_admin rule and ensure only project tokens can be cloud admin 
The current rule fails to load with oslo.policy, the correct
value used to determine the admin project for the cloud_admin should
simply be: `is_admin_project:True`, since that is what is stored
in oslo.context.

This problem was masking a more serious issue that domain admin tokens
could be misinterpreted as cloud admin tokens.

Change-Id: I3ea562c01e06e6c519fdaec3ab6e1dac204ced71
Closes-Bug: 1547684
Closes-Bug: 1651989
 		2016-12-23 09:31:08 +00:00
..
assignment Domain included for role in list_role_assignment 2016-12-06 10:26:13 -06:00
auth Validate token issue input 2016-11-30 13:26:05 -06:00
backend Remove stable driver interfaces 2016-09-28 17:18:37 +00:00
catalog Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
common Merge "Add reason to notifications for PCI-DSS" 2016-12-21 18:45:19 +00:00
config_files Add entrypoint for mapped auth method 2016-08-19 19:44:55 -07:00
contrib Use request.environ through auth and federation 2016-07-06 10:39:42 +10:00
credential fix credentials backend tests 2016-11-04 09:08:31 -05:00
endpoint_policy Fixes remaining nits in endpoint_policy tests 2016-11-15 20:03:47 +00:00
external Adds interface tests for timeutils 2015-09-23 12:43:37 +00:00
federation Validate mapping exists when creating/updating a protocol 2016-10-20 19:12:04 +00:00
identity Make user to nonlocal_user a 1:1 relationship 2016-12-14 14:43:34 +00:00
ksfixtures Remove driver version specifiers from tests 2016-10-06 21:22:48 +00:00
policy Create unit tests for the policy drivers 2016-08-09 11:59:20 -03:00
resource Make _option_dict() a method for domain_config_api 2016-12-15 04:10:12 +00:00
saml2 Add openstack_user_domain to assertion 2015-05-04 14:33:48 -03:00
schema Rename v2 token schema used for validation 2016-03-10 21:41:22 +00:00
tests Adds a skip method to identify useless skips 2016-06-29 19:48:12 +00:00
token Fix cloud_admin rule and ensure only project tokens can be cloud admin 2016-12-23 09:31:08 +00:00
trust Use more specific asserts in tests 2016-08-04 12:48:08 +02:00
__init__.py enable ldap tests for py3 2016-05-18 12:07:23 -04:00
core.py Use assertGreater(len(x), y) instead of assertTrue(len(x) > y) 2016-12-16 12:10:22 +00:00
default_catalog.templates
…
default_fixtures.py Make all fixture project_ids into uuids 2016-05-03 21:51:47 +00:00
fakeldap.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
federation_fixtures.py
…
filtering.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
identity_mapping.py Use the new enginefacade from oslo.db 2016-02-24 08:20:12 -08:00
mapping_fixtures.py Relax the requirement for mappings to result in group memberships 2016-09-01 03:24:27 +00:00
rest.py Remove driver version specifiers from tests 2016-10-06 21:22:48 +00:00
test_associate_project_endpoint_extension.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_auth.py refactor the token controller 2016-11-11 17:43:56 +00:00
test_auth_plugin.py Add entrypoint for mapped auth method 2016-08-19 19:44:55 -07:00
test_backend_endpoint_policy.py Use new_policy_ref consistently 2015-12-09 10:18:36 -08:00
test_backend_endpoint_policy_sql.py Fixes the SQL model tests 2015-03-08 05:34:48 +00:00
test_backend_federation_sql.py Add relay_state_prefix to Service Provider 2015-03-28 06:29:00 +00:00
test_backend_id_mapping_sql.py Faster id mapping lookup 2016-08-26 16:39:32 +03:00
test_backend_kvs.py Merge "Ensure all v2.0 tokens are validated the same way" 2016-10-12 03:16:36 +00:00
test_backend_ldap.py Remove CONF.os_inherit.enabled 2016-12-05 10:52:35 -08:00
test_backend_ldap_pool.py Pass request to v2 token authenticate 2016-07-15 13:33:39 +10:00
test_backend_rules.py Split policy backend tests 2016-03-04 15:32:42 -03:00
test_backend_sql.py Allow fetching an expired token 2016-11-28 04:07:26 +00:00
test_backend_templated.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_catalog.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_cert_setup.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_cli.py Merge "Add doctor checks for ldap symptoms" 2016-12-16 04:47:35 +00:00
test_config.py Using assertIsNone() instead of assertIs(None) 2016-09-26 15:33:18 +07:00
test_contrib_s3_core.py Fix string conversion in s3 handler for python 2 2015-11-18 13:25:27 +03:00
test_contrib_simple_cert.py Fixes to get cert tests running in Py3 2016-03-02 02:11:02 +00:00
test_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_driver_hints.py Use assertTrue/False instead of assertEqual(T/F) 2015-11-02 09:10:38 +00:00
test_entry_points.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_exception.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_hacking_checks.py Raise NotImplementedError instead of NotImplemented 2016-09-04 03:47:56 +00:00
test_kvs.py Fix D400 PEP257 2016-04-21 15:25:34 +00:00
test_ldap_livetest.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
test_ldap_pool_livetest.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_ldap_tls_livetest.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
test_middleware.py Skip middleware request processing for admin token 2016-08-02 19:47:32 -07:00
test_no_admin_token_auth.py Deprecate keystone.common.kvs 2016-05-12 23:30:15 -07:00
test_policy.py Fix cloud_admin rule and ensure only project tokens can be cloud admin 2016-12-23 09:31:08 +00:00
test_revoke.py Don't invalidate all user tokens of roleless group 2016-11-29 04:28:45 +00:00
test_sql_banned_operations.py Merge "Fixes password created_at errors due to the server_default" 2016-09-16 15:29:58 +00:00
test_sql_upgrade.py move common sql test helpers to base class 2016-12-16 19:43:46 -08:00
test_token_bind.py Change tests to use common name for keystone.tests.unit 2015-09-04 18:21:42 +00:00
test_token_provider.py Switch fernet to be the default token provider. 2016-11-02 00:33:24 +00:00
test_url_middleware.py Fix D401 PEP8 violation. 2016-04-14 20:08:52 +00:00
test_v2.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_v2_controller.py Use request.params instead of context['query_string'] 2016-06-29 04:46:57 +10:00
test_v2_validation.py Add schema validation to create user v2 2016-08-04 19:33:17 +00:00
test_v3.py Domain included for role in list_role_assignment 2016-12-06 10:26:13 -06:00
test_v3_assignment.py Get assignments with names honors inheritance flag 2016-12-07 13:35:55 +00:00
test_v3_auth.py Validate token issue input 2016-11-30 13:26:05 -06:00
test_v3_catalog.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_v3_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_v3_domain_config.py Implement password requirements API 2016-12-15 19:51:41 +00:00
test_v3_endpoint_policy.py Use new_policy_ref consistently 2015-12-09 10:18:36 -08:00
test_v3_federation.py Remove CONF.os_inherit.enabled 2016-12-05 10:52:35 -08:00
test_v3_filters.py Fix some typos in comments 2016-08-26 12:17:00 +02:00
test_v3_identity.py Removed unused EXTENSION_TO_ADD test declarations 2016-11-29 17:06:34 +00:00
test_v3_oauth1.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_v3_os_revoke.py Consistently round down timestamps 2016-09-12 16:16:29 +00:00
test_v3_policy.py Implement HEAD method for all v3 GET actions 2016-03-22 10:27:53 -07:00
test_v3_protection.py Add is_admin_project to policy dict 2016-10-14 13:32:47 +11:00
test_v3_resource.py Fix a docstring typo in test_v3_resource.py 2016-09-27 12:16:27 +00:00
test_v3_trust.py Invalidate trust when the related project is deleted 2016-10-14 16:55:06 +00:00
test_validation.py PCI-DSS Password strength requirements 2016-07-14 15:10:33 +00:00
test_versions.py Report v2.0 as deprecated in version discovery 2016-08-04 23:59:38 +03:00
test_wsgi.py Merge "Use http_client constants instead of hardcoding" 2016-07-09 00:53:19 +00:00
utils.py Add new functionality to @wip 2016-05-22 16:06:50 +00:00