keystone/bug-1652012-b3aea7c0d5affdb6.yaml at 4a82ab9065a659bbcb838240da113a0509f651aa - keystone - OpenDev: Free Software Needs Free Tools

openstack/keystone

Gage Hugo dc449dfd63 Change is_admin_project to False by default

Our token model code will return a default of True for
is_admin_project if that attribute is not defined. The
comment next to this says this is for backwards
compatibility, but this seems inherently dangerous.

Closes-Bug: #1652012

Change-Id: I035fe570972764b9c9342d1851654634d681ac5e

2017-03-03 14:51:23 -06:00

8 lines

319 B

YAML

Raw Blame History

 ---
 fixes:
   - |
     [`bug 1652012 <https://bugs.launchpad.net/keystone/+bug/1652012>`_]
     Changes the token_model to return is_admin_project False if the attribute
     is not defined. Returning True for this has the potential to be dangerous
     and the given reason for keeping it True is backwards compatability..