[Bug 1775229] Re: "Delete Groups" button is missing for a domain admin user

OpenStack Infra 1775229 at bugs.launchpad.net
Tue Jun 12 18:05:53 UTC 2018


Reviewed:  https://review.openstack.org/574138
Committed: https://git.openstack.org/cgit/openstack/charm-openstack-dashboard/commit/?id=e10f120a1d5725ce50dbae667a1d66b1100839b7
Submitter: Zuul
Branch:    master

commit e10f120a1d5725ce50dbae667a1d66b1100839b7
Author: Billy Olsen <billy.olsen at gmail.com>
Date:   Sun Jun 10 23:00:02 2018 -0700

    Update keystonev3_policy.json to enable UI buttons
    
    The horizon interface enables/displays actions based on the
    keystonev3_policy.json file provided. The keystonev3_policy.json file
    included by the charm has rules for various actions that depend on the
    target object's domain id (user, group, project). The buttons displayed
    for creating and deleting the objects (shown above the tables) are also
    based on these policy rules but no target object exists because they are
    bound to the table and not a specific target object.
    
    This patch changes some of the policy rules to create/delete users,
    projects, and groups to not require the target object's domain_id. This
    is safe to do because the table is shown within the context of the
    target domain_id already. Additionally, the actual ability to alter
    objects is controlled by the actual policy installed in Keystone and not
    the Horizon UI.
    
    Without this change, actions such as "Create User" will only show for
    a user who is a cloud admin and not for any domain admins (even if the
    domain admin is allowed to perform the action via the API or CLI).
    
    Change-Id: Ie0a85e11e6a171083deb19b0eb26c7e552390c00
    Closes-Bug: #1775224
    Closes-Bug: #1775229


** Changed in: charm-openstack-dashboard
       Status: In Progress => Fix Committed

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to horizon in Ubuntu.
https://bugs.launchpad.net/bugs/1775229

Title:
  "Delete Groups" button is missing for a domain admin user

Status in OpenStack openstack-dashboard charm:
  Fix Committed
Status in horizon package in Ubuntu:
  Invalid

Bug description:
  The setup is identical to the following bugs:
  https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1775224
  https://bugs.launchpad.net/ubuntu/+source/horizon/+bug/1775227

  The difference is that "Create Group" button is present for a domain
  admin but not "Delete Groups" after at least a single group is created
  which happens in the admin project scope.

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-openstack-dashboard/+bug/1775229/+subscriptions



More information about the Ubuntu-openstack-bugs mailing list