Create trust failed with permission to list roles
Bug #1658582 reported by hongbin
This bug affects 1 person
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| python-openstackclient |
Fix Released |
Undecided |
hongbin | ||
Bug Description
To reproduce the error:
$ source /opt/stack/ devstack/ openrc admin admin
$ TRUSTOR_ ID=`openstack user list | awk '/ admin /{print $2}'`
$ TRUSTEE_ ID=`openstack user list | awk '/ demo /{print $2}'`
$ source /opt/stack/ devstack/ openrc demo demo
$ openstack trust create --project demo --role Member $TRUSTOR_ID $TRUSTEE_ID
You are not authorized to perform the requested action: identity:list_roles (HTTP 403) (Request-ID: req-10468575- f0db-4f66- 82b9-77b912ee6f be)
If trustor is non-admin, he/she won't have enough permission to list roles. The create trust command should handle this case.