policy should return a 400 if a required field is missing

Bug #1133435 reported by Adam Young
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
In Progress
Low
Unassigned

Bug Description

Instead, policy will return a 403

Adam Young (ayoung)
summary: - policy should return a 400 if a required filed is missing
+ policy should return a 400 if a required field is missing
Revision history for this message
Dolph Mathews (dolph) wrote :

Which call, specifically? There's a lot of policy-related API calls.

Changed in keystone:
importance: Undecided → Low
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for Keystone because there has been no activity for 60 days.]

Changed in keystone:
status: Incomplete → Expired
Revision history for this message
Matthew Edmonds (edmondsw) wrote :

Found the problem and proposing a fix...

Changed in keystone:
status: Expired → Confirmed
assignee: nobody → Matthew Edmonds (edmondsw)
Changed in keystone:
status: Confirmed → In Progress
Revision history for this message
Matthew Edmonds (edmondsw) wrote :

fix proposed with https://review.openstack.org/#/c/482190/ but arguing over whether we can fix this without an API version bump.

Revision history for this message
Lance Bragstad (lbragstad) wrote :

Unassigning due to inactivity.

Changed in keystone:
assignee: Matthew Edmonds (edmondsw) → nobody
Revision history for this message
Matthew Edmonds (edmondsw) wrote :

The fix proposed in comment #4 is still the way to go IMHO, but the keystone cores decided we needed microversions before doing this.

tags: added: fix-requires-microversion
Revision history for this message
Lance Bragstad (lbragstad) wrote :
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on keystone (master)

Change abandoned by "Gage Hugo <email address hidden>" on branch: master
Review: https://review.opendev.org/c/openstack/keystone/+/482190
Reason: Abandoning since there hasn't been any recent activity, if anyone wants to continue this work, please feel free to restore this or create a new change.

Revision history for this message
Douglas Mendizábal (dougmendizabal) wrote :

We're keeping this bug around in case we implement microversions.

tags: added: reviewed-bobcat
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.