openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update heat from branch 'master'
  to 30a1ca1137ec13a99da8c631cb5cf957708c9ae1
  - Merge "Fix access by admin users to resources in different projects"
  - Fix access by admin users to resources in different projects
    
    This allows admin users[1] to use a different project id in request
    path, to fix the unexpected access denials during redirection when
    enforcing new default rules. This was allowed previously with
    deprecated policy rules, and with the new SRBAC design we require
    project scope auth to access project owned resources such as stack.
    
    [1]
    User with admin role in admin project in case admin_project_name is
    set in Keystone. If it's not set then user with admin role in any
    project are considered as "admin".
    
    Story: 2011036
    Task: 49532
    Change-Id: I49f46e36828881d9700e0e178bd80eb04efe4510
This commit is contained in:
Zuul 2024-03-12 02:56:50 +00:00 committed by Gerrit Code Review
parent 9fa2233c1e
commit 1f415cdc2a
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
heat

@ -1 +1 @@
Subproject commit 726ee1946f13055798c2ad9ad4d47a976d1e0c5c
Subproject commit 30a1ca1137ec13a99da8c631cb5cf957708c9ae1