keystone/keystone/assignment
prashkre d09c337619 Handle group NotFound in effective assignment list
When keystone is using an external identity backend such as LDAP for
storing users and groups, but storing role assignments in the local db,
and a group that has role assignments is deleted out-of-band, its
assignments will still exist in the keystone database. If, after this,
a user attempts to list effective role assignments, keystone will try
to lookup the group and fail with NotFound.

This catches the NotFound exception of the list_users_in_group call and
returns an empty user list so that the effective assignments list does
not fail.

Closes-Bug: 1693510
Change-Id: Ie5f69b150d59287bd0bc68f1ce9eecfeab04c91a
2017-05-26 18:09:03 -04:00
..
backends Merge "Make use of Dict-base including extras explicit" 2017-03-31 20:11:14 +00:00
role_backends Make use of Dict-base including extras explicit 2017-02-06 19:15:15 -08:00
__init__.py Remove exposure of routers at package level 2015-12-03 15:06:56 -03:00
controllers.py Refactor Authorization: 2017-05-02 14:42:03 -04:00
core.py Handle group NotFound in effective assignment list 2017-05-26 18:09:03 -04:00
routers.py Remove unused CONF 2017-04-22 15:22:05 +08:00
schema.py Fix v2 role create schema validation 2017-02-23 23:38:32 -06:00