openstack
/
keystone
Code Issues Proposed changes
keystone/keystone
History
Lance Bragstad 85b87fa479 Add protocol tests for system member role 
From keystone's perspective, the ``member`` and ``reader`` roles are
effectively the same, isolating writable protocol operations
to the ``admin`` role.

This commit adds explicit testing to make sure the ``member`` role is
allowed to perform readable and not writable protocol
operations. Subsequent patches will incorporate.

 - system admin functionality
 - domain users test coverage
 - project users test coverage

 Related-Bug: 1804523
 Related-Bug: 1806762

Change-Id: I55751a045cdb315c7534ee84a5c1fe5fb18aa65f
 		2019-01-08 19:48:15 +00:00
..
api Use request_body_json function 2018-12-10 15:48:23 +00:00
application_credential Remove unused logging module 2018-10-25 14:22:50 +08:00
assignment Remove message about circular role inferences 2018-12-11 21:22:51 -05:00
auth Emit CADF notifications on authentication for invalid users 2018-10-25 17:43:37 -07:00
catalog Region update extra support 2018-11-07 22:57:11 +00:00
cmd Fix an issue with double fernet key rotation 2018-11-05 22:34:03 +13:00
common Update protocol policies for system reader 2019-01-08 19:48:11 +00:00
conf Merge "Remove deprecated secure_proxy_ssl_header config" 2018-12-06 23:44:24 +00:00
credential Incorrect use of translation _() 2018-09-03 21:52:56 +05:30
endpoint_policy Convert policy API to flask 2018-08-31 07:14:32 +00:00
federation Invalidate shadow_federated_user cache when deleting protocol 2019-01-04 09:45:42 +08:00
identity Move to password validation schema 2018-11-27 14:57:44 -06:00
limit Merge "Allow registered limit's region_id to be None" 2018-10-31 14:14:22 +00:00
locale Imported Translations from Zanata 2018-08-09 06:06:59 +00:00
models Add missing ws seperator between words 2018-11-19 14:36:40 +08:00
oauth1 Convert /v3/users to flask native dispatching 2018-10-11 15:27:45 -07:00
policy Convert policy API to flask 2018-08-31 07:14:32 +00:00
receipt Change __all__ list to tuple 2018-11-07 16:40:02 -06:00
resource Removing default_assigment_driver 2018-11-13 07:45:28 +00:00
revoke Remove unused revoke_by_user_and_project 2018-09-14 04:08:01 +00:00
server Remove i18n.enable_lazy() translation 2018-12-14 10:30:17 +00:00
tests Add protocol tests for system member role 2019-01-08 19:48:15 +00:00
token Do not log token string 2018-08-16 21:29:11 +02:00
trust Add abstract method in trusts base.py 2018-11-07 08:43:39 +05:30
__init__.py Revert "Disable eventlet monkey-patching of DNS" 2013-05-10 10:24:48 -04:00
exception.py Implement auth receipts spec 2018-11-02 15:06:19 +01:00
i18n.py Update links in keystone 2017-09-12 15:18:13 +08:00
notifications.py Don't emit a notification for the root domain 2018-11-27 18:58:18 +00:00
version.py Update API version to 3.11 2018-10-16 16:32:29 +02:00