openstack
/
keystone
Code Issues Proposed changes

Assert default project id is not domain 

If using default project id when creating user, make sure
the project is not a domain.
This patch add the note to the description of default_project_id
in api ref.

Change-Id: Iedda6df116f237cb68a882efff6f3e19c6ee8e72
This commit is contained in:
zlyqqq 2017-07-17 10:52:05 +08:00 committed by zhengliuyang
parent 33b0ec1397
commit 00c444892a
1 changed files with 8 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
api-ref/source/v3/parameters.yaml
View File

@ -534,14 +534,14 @@ credentials_links:
default_project_id_request_body:
description: |
The ID of the default project for the user.
Setting this attribute does not grant any actual authorization on
the project, and is merely provided for convenience. Therefore,
the referenced project does not need to exist within the user
domain. (Since v3.1) If the user does not have authorization to
their default project, the default project is ignored at token
creation. (Since v3.1) Additionally, if your default project is
not valid, a token is issued without an explicit scope of
authorization.
A user's default project must not be a domain. Setting this
attribute does not grant any actual authorization on the project,
and is merely provided for convenience. Therefore, the referenced
project does not need to exist within the user domain. (Since v3.1)
If the user does not have authorization to their default project,
the default project is ignored at token creation. (Since v3.1)
Additionally, if your default project is not valid, a token is
issued without an explicit scope of authorization.
in: body
required: false
type: string