This commit adds thorough testing to make sure users who have a role
on a project can use project-scoped tokens to call GET
/v3/domain/{domain_id} for the domain own their project. These users
are not allowed to access domains that they don't have any
authorization via project role assignments.
This ensures the domains API is tested with these cases and makes the
domains API more self-serviceable for users that are not
administrators.
Reviewed: https:/ /review. openstack. org/605871 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=2c8f81af62c d03601fca259647 991d5dd7f8d560
Committed: https:/
Submitter: Zuul
Branch: master
commit 2c8f81af62cd036 01fca259647991d 5dd7f8d560
Author: Lance Bragstad <email address hidden>
Date: Thu Sep 27 21:51:12 2018 +0000
Allow project users to retrieve domains
This commit adds thorough testing to make sure users who have a role domain/ {domain_ id} for the domain own their project. These users
on a project can use project-scoped tokens to call GET
/v3/
are not allowed to access domains that they don't have any
authorization via project role assignments.
This ensures the domains API is tested with these cases and makes the
domains API more self-serviceable for users that are not
administrators.
Change-Id: Ifc100a7a235140 fbd07cbafe80983 d3c2f17a7dc
Closes-Bug: 1794864
Related-Bug: 968696