Previously, the default behavior for the callback that unset
default project ids was to only call the method for the default
domain's identity driver. This meant that when a project was deleted,
only the default identity backend would have references to that
project removed. This means it would be possible for other identity
backends to still have references to a project that doesn't exist
because the callback wasn't invoked for that specific backend.
This commit ensures each backend clears project id from a user's
default_project_id attribute when a project is deleted.
Reviewed: https:/ /review. openstack. org/491916 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=d0ad287df39 7513dd7cb8dd4da 0cae383c6b49b0
Committed: https:/
Submitter: Jenkins
Branch: master
commit d0ad287df397513 dd7cb8dd4da0cae 383c6b49b0
Author: Lance Bragstad <email address hidden>
Date: Tue Aug 8 20:31:26 2017 +0000
Unset project ids for all identity backends
Previously, the default behavior for the callback that unset
default project ids was to only call the method for the default
domain's identity driver. This meant that when a project was deleted,
only the default identity backend would have references to that
project removed. This means it would be possible for other identity
backends to still have references to a project that doesn't exist
because the callback wasn't invoked for that specific backend.
This commit ensures each backend clears project id from a user's project_ id attribute when a project is deleted.
default_
Change-Id: Ibb5396f20101a3 956fa91d6ff6815 5d4c00ab0f9
Closes-Bug: 1705072