It seems that a non-admin user cannot change their username and email. Using devstack:
$ source openrc demo demo
$ keystone user-update --name demo2 demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)
$ keystone user-update --email <email address hidden> demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)
I'm not sure about the impact of changing one's username but the users should surely be able to update their email address. I didn't find any relevant Keystone blueprints -- should I submit one?
It seems that a non-admin user cannot change their username and email. Using devstack:
$ source openrc demo demo
$ keystone user-update --name demo2 demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)
$ keystone user-update --email <email address hidden> demo
You are not authorized to perform the requested action, admin_required. (HTTP 403)
I'm not sure about the impact of changing one's username but the users should surely be able to update their email address. I didn't find any relevant Keystone blueprints -- should I submit one?