The idp policies were not taking the default roles work we did
last release into account. This commit changes the default policies
to rely on the ``reader`` role for get and list idps. Subsequent
patches will incorporate:
- system member test coverage
- system admin functionality
- domain users test coverage
- project users test coverage
Reviewed: https:/ /review. openstack. org/619371 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=27bf50d127e 0f194a839ccfd02 ba510656811c84
Committed: https:/
Submitter: Zuul
Branch: master
commit 27bf50d127e0f19 4a839ccfd02ba51 0656811c84
Author: Lance Bragstad <email address hidden>
Date: Wed Nov 21 21:38:21 2018 +0000
Update idp policies for system reader
The idp policies were not taking the default roles work we did
last release into account. This commit changes the default policies
to rely on the ``reader`` role for get and list idps. Subsequent
patches will incorporate:
- system member test coverage
- system admin functionality
- domain users test coverage
- project users test coverage
Related-Bug: 1804517
Related-Bug: 1804516
Change-Id: I18c041846010cd 985a4bd40aaac01 1354345fcfa