keystone/bug-1590587-domain-specific-role-assignment-8f120604a6625852.yaml at c4d60977881ac2f014dc6e2eaaba37892f075266 - keystone - OpenDev: Free Software Needs Free Tools

openstack/keystone

Sean Perry 73bdbe1f87 Project domain must match role domain for assignment

When assigning a Domain specific role to a user it is OK if the user
is from a different domain, but the project's domain must match the
role's domain.

Closes-Bug: 1590587
Change-Id: I1d63415de0130794939998c3e142ebdce9ddf39d

2016-09-07 11:43:53 -07:00

8 lines

273 B

YAML

Raw Blame History

 ---
 fixes:
   - >
     [`bug 1590587 <https://bugs.launchpad.net/keystone/+bug/1590587>`_]
     When assigning Domain Specific Roles, the domain of the role and the
     domain of the project must match. This is now validated and the REST
     call will return a 403 Forbidden.