OpenStack Identity (keystone)

EC2 credentials commands broken for non-admin users

Bug #950557 reported by Dean Troyer on 2012-03-09

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Identity (keystone)	Fix Released	Undecided	Dean Troyer	OpenStack Identity (keystone) 2012.1 "essex"

Bug Description

https://review.openstack.org/4659 appears to have left the EC2 extensions broken for non-admin users.

The problem appears to be due to the policy backend returning a different exception via wsgi.Application.assert_admin() failure than the Ec2Controller._is_admin() method is expecting.

Dean Troyer (dtroyer) on 2012-03-09

Changed in keystone:
assignee:	nobody → Dean Troyer (dtroyer)

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2012-03-09: Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/5123

Changed in keystone:
status:	New → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2012-03-09: Fix merged to keystone (master)

Reviewed: https://review.openstack.org/5123
Committed: http://github.com/openstack/keystone/commit/303a10b9460c506455a74e890567031cf4c9cdef
Submitter: Jenkins
Branch: master

commit 303a10b9460c506455a74e890567031cf4c9cdef
Author: Dean Troyer <email address hidden>
Date: Fri Mar 9 00:03:46 2012 -0600

Fix EC2 credentials crud after policy backend change

    https://review.openstack.org/4659 implemented the common policy code
    but made a change to the exception thrown by wsgi.Application.assert_admin()
    and Ec2Controller._is_admin() needed updating.

Fixes bug 950557

Change-Id: I0e27aeeabd1be5a6012e34aa71efdfc2f2d5a726