trust still exist in the DB when the trustor/trustee/project is deleted
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Identity (keystone) |
Fix Released
|
Low
|
Dave Chen |
Bug Description
When a trust is created, it requires trustee, trustor exist in the DB, but when the associated user or project is deleted trust still exist in DB.
The trust left in the DB is useless, and won't be used any longer since either id of user/project is a random number when it got created it not likely the trust will be effective in the future.
How to reproduce:
$ openstack user create trustor --password abc123
$ openstack user create trustee --password abc123
$ openstack project create trust_project
$ openstack role add 9cf8420ea5324f7
curl -g -i -X POST -H "Accept: application/json" -H "X-Auth-Token: 94d06939e65243f
"trust": {
"roles": [
{
}
],
}
}' http://
$ openstack user delete trustor
$ openstack trust list
+------
| ID | Expires At | Impersonation | Project ID | Trustee User ID | Trustor User ID |
+------
| e7491ab063e247b
| b32e37e | 0Z | | c0e2089 | 8aa569c | aaee070 |
+------
description: | updated |
Changed in keystone: | |
assignee: | Dave Chen (wei-d-chen) → Steve Martinelli (stevemar) |
Changed in keystone: | |
assignee: | Steve Martinelli (stevemar) → Dave Chen (wei-d-chen) |
milestone: | none → ocata-1 |
Fix proposed to branch: master /review. openstack. org/368422
Review: https:/