openstack
/
keystone
Code Issues Proposed changes

Allow Domain Admin to get domain details 

This will give Domain Admin the ability to retrieve the details
for it's domain.

Change-Id: Ia82aaa686a7381be0b3f46c1d90658c1f1e1167d
Closes-Bug: #1480480
This commit is contained in:
daniel-a-nguyen 2015-07-31 16:14:28 -07:00
parent 4ff9e969a8
commit 1d39b590b8
2 changed files with 9 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
etc/policy.v3cloudsample.json
View File

@ -29,7 +29,7 @@
"identity:update_endpoint": "rule:cloud_admin",
"identity:delete_endpoint": "rule:cloud_admin",
"identity:get_domain": "rule:cloud_admin",
"identity:get_domain": "rule:cloud_admin or rule:admin_and_matching_domain_id",
"identity:list_domains": "rule:cloud_admin",
"identity:create_domain": "rule:cloud_admin",
"identity:update_domain": "rule:cloud_admin",

8
keystone/tests/unit/test_v3_protection.py
View File

@ -1039,6 +1039,14 @@ class IdentityTestv3CloudPolicySample(test_v3.RestfulTestCase,
self._test_domain_management()
def test_domain_admin_get_domain(self):
self.auth = self.build_authentication_request(
user_id=self.domain_admin_user['id'],
password=self.domain_admin_user['password'],
domain_id=self.domainA['id'])
entity_url = '/domains/%s' % self.domainA['id']
self.get(entity_url, auth=self.auth, expected_status=200)
def test_list_user_credentials(self):
self.credential_user = self.new_credential_ref(self.just_a_user['id'])
self.credential_api.create_credential(self.credential_user['id'],