openstack
/
openstack
Code Issues Proposed changes

Update git submodules 

* Update barbican from branch 'master'
  to fa8e52ccb7c81d6dbd61e36d60230917f4654943
  - Merge "Update secret:delete policy to allow admin to delete secret"
  - Update secret:delete policy to allow admin to delete secret
    
    Currently a secret can be orphan, if the project that owns it
    is deleted by an user that doesn`t have permission on the
    project.[1]
    The orphan secret cannot be deleted because the current rule
    enforces a scoped token on that project to delete it (that
    doesn't exist anymore).
    To solve this issue, it's necessary to override the secret:delete
    policy rule to allow the cloud admin to delete it.
    The secret:get policy rule also needed to be changed because the
    Python Barbican client gets the secret to check if it has
    consumers before actually deleting it. This patch is making these
    updates by default
    
    [1] https://bugzilla.redhat.com/show_bug.cgi?id=1932705
    
    Co-author: Mauricio Harley <mharley@redhat.com>
    Change-Id: Id755a9efd896b900d31eca93c0136398ed1925b8
This commit is contained in:
Zuul 2023-10-02 12:17:10 +00:00 committed by Gerrit Code Review
parent f454db9565
commit 296243d90b
1 changed files with 1 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
barbican

@ -1 +1 @@
Subproject commit 8830b38b46c3880b696608022250ab9b55adb222
Subproject commit fa8e52ccb7c81d6dbd61e36d60230917f4654943