[Bug 1775229] Re: "Delete Groups" button is missing for a domain admin user

[Billy Olsen]

The problem is due to the openstack-dashboard charm's
keystonev3_policy.json file which requires that the
target.group.domain_id matches the current admin's id. The "Delete
Groups" button depends on the delete_groups policy but the policy
depends on the target.group.domain_id in order to be valid. The "Delete
Groups" button does not have a group context associated when it is
rendered and thus does not pass the policy.

This is fixed by simply removing the target.group.domain_id from the
policy file as the group is only shown in the proper domain context.
It's also safe to do as the final ability to remove the group is held
within keystone policy configuration itself, which will does have the
proper target check because it is supplied as part of a delete api call.

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to horizon in Ubuntu.
https://bugs.launchpad.net/bugs/1775229

Title:
  "Delete Groups" button is missing for a domain admin user

Status in OpenStack openstack-dashboard charm:
  In Progress
Status in horizon package in Ubuntu:
  Invalid

Bug description:
  The setup is identical to the following bugs:
  https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1775224
  https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1775227

  The difference is that "Create Group" button is present for a domain
  admin but not "Delete Groups" after at least a single group is created
  which happens in the admin project scope.

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-openstack-dashboard/+bug/1775229/+subscriptions