keystone/releasenotes/notes/bug-1748970-eb63ad2030e296f3.yaml
Lance Bragstad 8748e729b2 Fix querying role_assignment with system roles
This commit removes system role assignments when querying keystone
for a list of assignments pertaining to a specific role. For example,
`GET /v3/role_assignments?role.id={role_id}`, now returns assignments
only for that role. Previously, the list contained false positives
because some system role assignments weren't being removed. This
was introduced in queens with the system scope work.

Change-Id: Iab35ae01bb715da5813e62cd09900de555dceaaa
Closes-Bug: 1748970
2018-02-13 21:37:15 +00:00

10 lines
392 B
YAML

---
fixes:
- |
[`bug 1748970 <https://bugs.launchpad.net/keystone/+bug/1748970>`_]
A bug was introduced in Queens that resulted in system role assignments
being returned when querying the role assignments API for a specific role.
The issue is fixed and the list of roles returned from
``GET /v3/role_assignments?role.id={role_id}`` respects system role
assignments.