Not able to delete users' stacks
Bug #1762411 reported by
YG Kumar
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| OpenStack Heat |
Incomplete
|
Undecided
|
Unassigned | ||
Bug Description
I am unable to delete other users' heat stacks as an 'admin' user of openstack. Below is the error thrown:
------------
DELETE /v1/463f99a375c
RESP BODY: {"explanation": "The resource could not be found.", "code": 404, "error": {"message": "The Stack (d1b25d40-
But when I list the stacks using "--all-projects" I can see those stacks of other users. But when I try deleting that stack as 'admin' user, it is not happening.
Thanks
Kumar
Revision history for this message
| Rabi Mishra (rabi) wrote | #1 |
| Changed in heat: | |
| status: | New → Incomplete |
| Changed in heat: | |
| milestone: | none → no-priority-tag-bugs |
To post a comment you must log in.
--all-projects allows you to see the stacks of all projects as an admin user. However, that would not allow you do update/delete of those stacks.
user with admin role in a specific project (ex. user with admin role in admin project) can update/delete the stacks of other projects with the stack id, provided,
The following is set in keystone.conf
admin_project_name = admin
admin_project_
This makes users with admin role in the above project (admin), global administrators. Tokens scoped to this project will contain a true 'is_admin_project` attribute to indicate to policy systems that the role assignments on that specific project should apply equally across every project.