openstack
/
keystone
Code Issues Proposed changes

Merge "fix identity:get_identity_providers typo" into stable/ocata

This commit is contained in:
Jenkins 2017-07-21 00:12:50 +00:00 committed by Gerrit Code Review
parent fa76aa5f5d 6c96675d63
commit 439872bc19
4 changed files with 14 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
doc/source/policy_mapping.rst
View File

@ -146,7 +146,7 @@ identity:remove_endpoint_group_from_project DELETE /v3/OS-EP-FILT
identity:create_identity_provider PUT /v3/OS-FEDERATION/identity_providers/{idp_id}
identity:list_identity_providers GET /v3/OS-FEDERATION/identity_providers
identity:get_identity_providers GET /v3/OS-FEDERATION/identity_providers/{idp_id}
identity:get_identity_provider GET /v3/OS-FEDERATION/identity_providers/{idp_id}
identity:update_identity_provider PATCH /v3/OS-FEDERATION/identity_providers/{idp_id}
identity:delete_identity_provider DELETE /v3/OS-FEDERATION/identity_providers/{idp_id}

2
etc/policy.json
View File

@ -147,7 +147,7 @@
"identity:create_identity_provider": "rule:admin_required",
"identity:list_identity_providers": "rule:admin_required",
"identity:get_identity_providers": "rule:admin_required",
"identity:get_identity_provider": "rule:admin_required",
"identity:update_identity_provider": "rule:admin_required",
"identity:delete_identity_provider": "rule:admin_required",

2
etc/policy.v3cloudsample.json
View File

@ -174,7 +174,7 @@
"identity:create_identity_provider": "rule:cloud_admin",
"identity:list_identity_providers": "rule:cloud_admin",
"identity:get_identity_providers": "rule:cloud_admin",
"identity:get_identity_provider": "rule:cloud_admin",
"identity:update_identity_provider": "rule:cloud_admin",
"identity:delete_identity_provider": "rule:cloud_admin",

11
releasenotes/notes/bug-1703369-9a901d627a1e0316.yaml Normal file
View File

@ -0,0 +1,11 @@
---
security:
- |
[`bug 1703369 <https://bugs.launchpad.net/keystone/+bug/1703369>`_]
There was a typo for the identity:get_identity_provider rule in the
default ``policy.json`` file in previous releases. The default value for
that rule was the same as the default value for the default rule
(restricted to admin) so this typo was not readily apparent. Anyone
customizing this rule should review their settings and confirm that
they did not copy that typo. More context regarding the purpose of this
backport can be found in the bug report.