V3 Auth controller does not have collection_name and member_name defined

Bug #1251048 reported by Arvind Tiwari
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
Wishlist
Arvind Tiwari

Bug Description

keystone.auth.controller should have collection_name and member_name defined.

It should be set to

collection_name = 'auths'
member_name = 'auth'

Changed in keystone:
assignee: nobody → Arvind Tiwari (arvind-tiwari)
Changed in keystone:
status: New → In Progress
Revision history for this message
Arvind Tiwari (arvind-tiwari) wrote :

From V3 auth controller code we are calling the protection() wrappers, but we are not setting up the member_name and collection_name attributes auth controller.
In the absence of these attributes, default 'entity' string will be used into for the target which is generic. Policy can be defined using 'entity' but it would not reflect entity is in context.

Revision history for this message
Dolph Mathews (dolph) wrote :

This was left off because auth is an odd case that does not behave like a collection at all. 'tokens' / 'token' may make more sense given the context -- the auth controller specifically issues and validates tokens.

Changed in keystone:
importance: Undecided → Low
Dolph Mathews (dolph)
Changed in keystone:
importance: Low → Wishlist
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/50488
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=19620076f587f925c5d2fa59780c1a80dde15db2
Submitter: Jenkins
Branch: master

commit 19620076f587f925c5d2fa59780c1a80dde15db2
Author: Arvind Tiwari <email address hidden>
Date: Tue Oct 8 15:16:11 2013 -0600

    Policy based domain isolation can't be defined.

    Policy based domain isolation is not possible on token
    APIs due to lack of domain_id in policy_dict for API target

    Closes-Bug: 1233874
    Closes-Bug: 1251048

    Change-Id: I855ec8ff4899ba3797a2e2bb23945ab4b23d2bea

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → icehouse-2
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in keystone:
milestone: icehouse-2 → 2014.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.