Make user properties editable by end-user

Bug #884492 reported by Tres Henry
48
This bug affects 8 people
Affects Status Importance Assigned to Milestone
OpenStack Dashboard (Horizon)
New
Wishlist
Unassigned
OpenStack Identity (keystone)
Fix Released
Wishlist
Unassigned

Bug Description

An end-user should be able to edit the properties of their own user (email, password, possibly default tenant, possibly username).

This requires API support in Keystone, and a new Settings dashboard panel in Horizon.

Devin Carlen (devcamcar)
Changed in horizon:
status: New → Confirmed
importance: Undecided → Medium
milestone: none → essex-3
Devin Carlen (devcamcar)
Changed in horizon:
milestone: essex-3 → essex-4
Devin Carlen (devcamcar)
Changed in horizon:
assignee: nobody → Nebula (nebula)
Revision history for this message
Gabriel Hurley (gabriel-hurley) wrote :

Bumping to 2012.1 since there isn't a patch yet.

Changed in horizon:
milestone: essex-4 → 2012.1
Thierry Carrez (ttx)
Changed in horizon:
milestone: 2012.1 → essex-rc1
Tres Henry (tres)
Changed in horizon:
status: Confirmed → In Progress
Changed in horizon:
assignee: Nebula (nebula) → Tres Henry (tres)
Revision history for this message
Tres Henry (tres) wrote :

This depends on support from keystone which isn't going to exist in Essex.

Changed in horizon:
milestone: essex-rc1 → none
summary: - UX Improvements: Settings - Email
+ Make user email editable by end-user
description: updated
summary: - Make user email editable by end-user
+ Make user properties editable by end-user
tags: removed: ux
description: updated
Changed in horizon:
status: In Progress → Confirmed
assignee: Tres Henry (tres) → Gabriel Hurley (gabriel-hurley)
milestone: none → grizzly-1
Revision history for this message
Joseph Heck (heckj) wrote :

marking as wishlist - requires V3 API and clear policy rules on the keystone side, assuming that the back-end identity plugin supports that functionality (i.e. isn't read-only)

Changed in keystone:
status: New → Triaged
importance: Undecided → Wishlist
Changed in horizon:
assignee: Gabriel Hurley (gabriel-hurley) → nobody
milestone: grizzly-1 → none
Revision history for this message
Julie Pichon (jpichon) wrote :

The keystone client now allows users to change their own password (https://bugs.launchpad.net/python-keystoneclient/+bug/1082539). It sounds worthwhile implementing on its own in Horizon, even if the other properties can't all be edited yet.

Revision history for this message
Dolph Mathews (dolph) wrote :

The v3 API is designed with users editing their own attributes in mind (such as password and default_project_id).

  https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md

The details of authorization are left to policy.json. Implementation merged during grizzly.

Changed in keystone:
status: Triaged → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
status: Fix Committed → Fix Released
Changed in horizon:
assignee: nobody → 牛振国 (niu-zglinux)
Revision history for this message
Zhenguo Niu (niu-zglinux) wrote :

 Allow users to change their passwords: https://review.openstack.org/23901

Changed in horizon:
status: Confirmed → In Progress
Revision history for this message
Julie Pichon (jpichon) wrote :

Since there is already a blueprint for changing your own password that is implemented by this review, I think this bug should be left open for someone to implement editing of the other attributes (email, etc.) in the future.

Changed in horizon:
assignee: 牛振国 (niu-zglinux) → nobody
status: In Progress → Confirmed
Revision history for this message
shake.chen (shake-chen) wrote :

Now the user modify the Language at settting, it work, but after logout and login again, it is not change.

I think the user language setting have not save in keystone user.

Revision history for this message
Tomas Sedovic (tsedovic) wrote :

It seems that a non-admin user cannot change their username and email. Using devstack:

$ source openrc demo demo

$ keystone user-update --name demo2 demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)

$ keystone user-update --email <email address hidden> demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)

I'm not sure about the impact of changing one's username but the users should surely be able to update their email address. I didn't find any relevant Keystone blueprints -- should I submit one?

Revision history for this message
Tomas Sedovic (tsedovic) wrote :

I'm sorry. I read the full thread and yet I missed Keystone v3 API discussion, please disregard my previous comment.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (master)

Fix proposed to branch: master
Review: https://review.openstack.org/51580

Changed in horizon:
assignee: nobody → Christian Schwede (cschwede)
status: Confirmed → In Progress
Matthias Runge (mrunge)
Changed in horizon:
status: In Progress → Triaged
assignee: Christian Schwede (cschwede) → nobody
Changed in horizon:
assignee: nobody → Victoria Martínez de la Cruz (vkmc)
Changed in horizon:
assignee: Victoria Martínez de la Cruz (vkmc) → nobody
Changed in horizon:
assignee: nobody → Santiago Baldassin (santiago-b-baldassin)
Changed in horizon:
assignee: Santiago Baldassin (santiago-b-baldassin) → nobody
Changed in horizon:
assignee: nobody → Nikunj Aggarwal (nikunj2512)
Changed in horizon:
status: Triaged → In Progress
Changed in horizon:
status: In Progress → Fix Committed
Revision history for this message
Julie Pichon (jpichon) wrote :

Please do not change bug statuses to "Fix Committed", this is done automatically by Gerrit. The linked patch in this case is abandoned andn ot merged, it seems the APIs still do no let us easily do this currently.

Changed in horizon:
status: Fix Committed → Confirmed
Changed in horizon:
status: Confirmed → In Progress
Revision history for this message
Julie Pichon (jpichon) wrote :
Revision history for this message
Nikunj Aggarwal (nikunj2512) wrote :

Still have to work with keystone team to support password change for end users.

Revision history for this message
Julie Pichon (jpichon) wrote :

Self-password change is ok and implemented in both Keystone v2/v3 and Horizon. There is no Keystone API for modifying user properties yet though, AFAIK. Comment #5 suggests it's implemented but I don't think it's fine-grained enough, if I understand it correctly (it would reopen the security issue from bug 1237989).

Revision history for this message
Rob Cresswell (robcresswell-deactivatedaccount) wrote :

Removed Assignee. No update in ~10 months.

Changed in horizon:
assignee: Nikunj Aggarwal (nikunj2512) → nobody
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on horizon (master)

Change abandoned by Matthias Runge (<email address hidden>) on branch: master
Review: https://review.openstack.org/99875
Reason: no change here for the last 6 months. Feel free to restore, if you want to work on this patch.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to horizon (master)

Fix proposed to branch: master
Review: https://review.openstack.org/265310

Changed in horizon:
assignee: nobody → Itxaka Serrano (itxakaserrano)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on horizon (master)

Change abandoned by Itxaka Serrano Garcia (<email address hidden>) on branch: master
Review: https://review.openstack.org/265310

David Lyle (david-lyle)
Changed in horizon:
status: In Progress → New
importance: Medium → Wishlist
Akihiro Motoki (amotoki)
Changed in horizon:
assignee: Itxaka Serrano (itxaka) → nobody
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.