deb-keystone/keystone/tests
Boris Bobrov 955fd6ca37 Do not fetch group assignments without groups
Without the change, the method fetched all assignments for a project
or domain, regardless of who has the assignment, user or group. This
led to situation when federated user without groups could scope a token
with other user's rules.

Return empty list of assignments if no groups were passed.

Closes-Bug: 1677723
Change-Id: I65f5be915bef2f979e70b043bde27064e970349d
(cherry picked from commit 2139639eea)
2017-04-25 14:36:12 +00:00
..
common Fix keystone.common.wsgi to explicitly use bytes 2016-03-02 01:30:20 -05:00
functional Fix a few spelling mistakes 2016-06-24 02:53:48 +00:00
hacking Replace six iteration methods with standard ones 2016-09-08 18:56:31 +08:00
unit Do not fetch group assignments without groups 2017-04-25 14:36:12 +00:00
__init__.py Move existing tests to unit 2015-02-13 15:54:29 -06:00