Colleen Murphy ba89d27793 Ensure OAuth1 authorized roles are respected ... Without this patch, when an OAuth1 request token is authorized with a limited set of roles, the roles for the access token are ignored when the user uses it to request a keystone token. This means that user of an access token can use it to escallate their role assignments beyond what was authorized by the creator. This patch fixes the issue by ensuring the token model accounts for an OAuth1-scoped token and correctly populating the roles for it. Change-Id: I02f9836fbd4d7e629653977fc341476cfd89859e Closes-bug: #1873290 (cherry picked from commit 6c73690f77)		2020-05-02 12:35:10 -07:00
..
common	Add missing translation import to common.auth.py	2018-11-28 14:23:41 +00:00
functional	Update keystone functional tests	2018-04-18 21:04:59 +00:00
hacking	Remove six usage	2020-01-30 06:06:51 +00:00
protection	Merge "Add domain admin grant test cases"	2020-02-06 20:12:08 +00:00
unit	Ensure OAuth1 authorized roles are respected	2020-05-02 12:35:10 -07:00
__init__.py	Move existing tests to unit	2015-02-13 15:54:29 -06:00