openstack
/
keystone
Code Issues Proposed changes
keystone/keystone/tests/unit
History
prashkre 2fdf89554f Handle group NotFound in effective assignment list 
When keystone is using an external identity backend such as LDAP for
storing users and groups, but storing role assignments in the local db,
and a group that has role assignments is deleted out-of-band, its
assignments will still exist in the keystone database. If, after this,
a user attempts to list effective role assignments, keystone will try
to lookup the group and fail with NotFound.

This catches the NotFound exception of the list_users_in_group call and
returns an empty user list so that the effective assignments list does
not fail.

Closes-Bug: 1693510
Change-Id: Ie5f69b150d59287bd0bc68f1ce9eecfeab04c91a
(cherry picked from commit d09c337619)
 		2017-05-31 12:23:02 +05:30
..
assignment Handle group NotFound in effective assignment list 2017-05-31 12:23:02 +05:30
auth Cleanup TODO about auth.controller code moved to core 2017-01-31 16:52:36 +00:00
backend Remove stable driver interfaces 2016-09-28 17:18:37 +00:00
catalog Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
common Merge "Use https for docs.openstack.org references" 2017-02-01 16:36:44 +00:00
config_files Remove LDAP write support 2017-01-21 21:32:07 -05:00
contrib Adds tests showing how mapping locals are handled 2017-01-26 20:42:12 +00:00
credential fix credentials backend tests 2016-11-04 09:08:31 -05:00
endpoint_policy Fixes remaining nits in endpoint_policy tests 2016-11-15 20:03:47 +00:00
external Adds interface tests for timeutils 2015-09-23 12:43:37 +00:00
federation Validate mapping exists when creating/updating a protocol 2016-10-20 19:12:04 +00:00
identity Fix MFA rule checks for LDAP auth 2017-02-24 12:02:09 -05:00
ksfixtures Merge "Process and validate auth methods against MFA rules" 2017-02-01 02:34:24 +00:00
policy Create unit tests for the policy drivers 2016-08-09 11:59:20 -03:00
resource Remove CONF.domain_id_immutable 2017-01-03 22:51:15 +00:00
saml2 Add openstack_user_domain to assertion 2015-05-04 14:33:48 -03:00
schema Rename v2 token schema used for validation 2016-03-10 21:41:22 +00:00
tests Adds a skip method to identify useless skips 2016-06-29 19:48:12 +00:00
token Merge "Cleanup TODO, AuthContext and AuthInfo to auth.core" 2017-02-01 02:42:53 +00:00
trust Use more specific asserts in tests 2016-08-04 12:48:08 +02:00
__init__.py enable ldap tests for py3 2016-05-18 12:07:23 -04:00
core.py Code-Defined Resource-specific Options 2017-01-25 16:15:44 -08:00
default_catalog.templates Move existing tests to unit 2015-02-13 15:54:29 -06:00
default_fixtures.py Handle group NotFound in effective assignment list 2017-05-31 12:23:02 +05:30
fakeldap.py Remove LDAP write support 2017-01-21 21:32:07 -05:00
federation_fixtures.py Move existing tests to unit 2015-02-13 15:54:29 -06:00
filtering.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
identity_mapping.py Use the new enginefacade from oslo.db 2016-02-24 08:20:12 -08:00
mapping_fixtures.py Merge "Catch potential SyntaxError in federation mapping" 2017-01-26 09:21:08 +00:00
rest.py Remove driver version specifiers from tests 2016-10-06 21:22:48 +00:00
test_associate_project_endpoint_extension.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_auth.py refactor the token controller 2016-11-11 17:43:56 +00:00
test_auth_plugin.py Cleanup TODO, AuthContext and AuthInfo to auth.core 2017-01-31 16:52:41 +00:00
test_backend_endpoint_policy.py Use new_policy_ref consistently 2015-12-09 10:18:36 -08:00
test_backend_endpoint_policy_sql.py Fixes the SQL model tests 2015-03-08 05:34:48 +00:00
test_backend_federation_sql.py Require domain_id when registering Identity Providers 2017-01-06 16:05:12 +00:00
test_backend_id_mapping_sql.py Do not call `to_dict` outside of a session context 2017-01-25 06:12:20 +00:00
test_backend_kvs.py Merge "Ensure all v2.0 tokens are validated the same way" 2016-10-12 03:16:36 +00:00
test_backend_ldap.py Remove code supporting moving resources between domains 2017-01-24 13:08:48 -08:00
test_backend_ldap_pool.py Code-Defined Resource-specific Options 2017-01-25 16:15:44 -08:00
test_backend_rules.py Split policy backend tests 2016-03-04 15:32:42 -03:00
test_backend_sql.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_backend_templated.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_catalog.py Handling of 'region' parameter as None 2017-01-17 20:03:03 +00:00
test_cert_setup.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_cli.py Merge "Add doctor checks for ldap symptoms" 2016-12-16 04:47:35 +00:00
test_config.py Using assertIsNone() instead of assertIs(None) 2016-09-26 15:33:18 +07:00
test_contrib_s3_core.py Fix string conversion in s3 handler for python 2 2015-11-18 13:25:27 +03:00
test_contrib_simple_cert.py Fixes to get cert tests running in Py3 2016-03-02 02:11:02 +00:00
test_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_driver_hints.py Use assertTrue/False instead of assertEqual(T/F) 2015-11-02 09:10:38 +00:00
test_entry_points.py remove deprecated items from contrib 2016-09-27 11:55:41 +03:00
test_exception.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_hacking_checks.py Use public interfaces of pep8 for hacking 2017-01-09 16:30:01 +00:00
test_kvs.py Fix D400 PEP257 2016-04-21 15:25:34 +00:00
test_ldap_livetest.py Remove releated role_tree_dn test 2017-01-21 23:16:38 +08:00
test_ldap_pool_livetest.py replace assertTrue with assertIs. 2016-12-16 08:15:51 +00:00
test_ldap_tls_livetest.py Replace keystone.common.config with keystone.conf package 2016-06-24 17:02:15 +00:00
test_middleware.py Skip middleware request processing for admin token 2016-08-02 19:47:32 -07:00
test_no_admin_token_auth.py Deprecate keystone.common.kvs 2016-05-12 23:30:15 -07:00
test_policy.py Fix cloud_admin rule and ensure only project tokens can be cloud admin 2016-12-23 09:31:08 +00:00
test_revoke.py Modify the spelling mistakes 2017-02-02 14:23:21 +00:00
test_shadow_users.py Refactor shadow users tests 2017-01-25 16:11:01 +00:00
test_sql_banned_operations.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_sql_upgrade.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_token_bind.py Change tests to use common name for keystone.tests.unit 2015-09-04 18:21:42 +00:00
test_token_provider.py Switch fernet to be the default token provider. 2016-11-02 00:33:24 +00:00
test_url_middleware.py Fix D401 PEP8 violation. 2016-04-14 20:08:52 +00:00
test_v2.py Remove support for PKI and PKIz tokens 2016-11-01 22:05:01 +00:00
test_v2_controller.py Use request.params instead of context['query_string'] 2016-06-29 04:46:57 +10:00
test_v2_validation.py Removes unnecessary utf-8 encoding 2016-12-26 12:59:21 +07:00
test_v3.py Cleanup TODO, AuthContext and AuthInfo to auth.core 2017-01-31 16:52:41 +00:00
test_v3_assignment.py Removing group role assignments results in overly broad revocation events 2017-03-03 03:38:17 +00:00
test_v3_auth.py Removing group role assignments results in overly broad revocation events 2017-03-03 03:38:17 +00:00
test_v3_catalog.py Replace tenant with project for keystone catalog 2016-10-16 11:20:12 +08:00
test_v3_credential.py Implement encryption of credentials at rest 2016-09-02 04:25:49 +00:00
test_v3_domain_config.py Implement password requirements API 2016-12-15 19:51:41 +00:00
test_v3_endpoint_policy.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_federation.py Do not fetch group assignments without groups 2017-04-25 14:36:12 +00:00
test_v3_filters.py Add password expiration queries for PCI-DSS 2017-01-24 09:01:12 -06:00
test_v3_identity.py Create user option `ignore_lockout_failure_attempts` 2017-01-29 13:19:44 -08:00
test_v3_oauth1.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_os_revoke.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_v3_policy.py Implement HEAD method for all v3 GET actions 2016-03-22 10:27:53 -07:00
test_v3_protection.py listing revoke events should be admin only 2017-01-09 21:12:47 +00:00
test_v3_resource.py Remove CONF.domain_id_immutable 2017-01-03 22:51:15 +00:00
test_v3_trust.py Invalidate trust when the related project is deleted 2016-10-14 16:55:06 +00:00
test_validation.py Add validation for mfa rule validator (storage) 2017-01-31 08:49:35 -08:00
test_versions.py Use https for docs.openstack.org references 2017-01-30 16:05:08 -08:00
test_wsgi.py Merge "Use http_client constants instead of hardcoding" 2016-07-09 00:53:19 +00:00
utils.py Add new functionality to @wip 2016-05-22 16:06:50 +00:00