openstack-python-openstackc.../openstackclient
Nathan Kinder f0c57e17c9 Allow --domain to be used for identity commands without lookup
Performing create, list, or set operations for users, groups, and projects
with the --domain option attempts to look up the domain for name to ID
conversion.  In the case of an environment using Keystone domains, it is
desired to allow a domain admin to perform these operations for objects in
their domain without allowing them to list or show domains. The current
behavior prevents the domain admin from performing these operations since
they will be forbidden to perform the underlying list_domains operation.

This patch makes the domain lookup error a soft failure, and falls back
to using the passed in domain argument directly as a domain ID in the
request that it sends to Keystone.

Change-Id: I5139097f8cedc53693f6f71297518917ac72e50a
Closes-Bug: #1378565
2014-10-09 13:29:21 -07:00
..
api Support for keystone auth plugins 2014-10-09 12:34:47 +02:00
common Add domain parameters to user show for Identity V3 2014-10-09 14:34:48 -04:00
compute Merge "Fix security group list for non-admin" 2014-09-06 17:02:42 +00:00
identity Allow --domain to be used for identity commands without lookup 2014-10-09 13:29:21 -07:00
image Change help text for image save command 2014-09-21 12:02:11 -04:00
network Merge "Network use enable/disable vs admin state up/down" 2014-09-08 17:29:37 +00:00
object Fix issues with object related commands 2014-10-06 20:04:19 -04:00
tests Support for keystone auth plugins 2014-10-09 12:34:47 +02:00
volume Merge "Normalize more help strings" 2014-07-24 22:09:28 +00:00
__init__.py Change version reporting to use pbr 2013-08-02 12:11:49 -05:00
i18n.py Add i18n module to openstackclient 2014-08-24 18:16:15 +00:00
shell.py Support for keystone auth plugins 2014-10-09 12:34:47 +02:00