<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 01/06/2015 06:27 PM, Ratnadeep
Bhattacharjee wrote:<br>
</div>
<blockquote
cite="mid:1834834939.3292573.1420586822632.JavaMail.yahoo@jws10062.mail.ne1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:16px">
<div id="yui_3_16_0_1_1420586343585_11674">Hi, <br>
</div>
<div class="qtdSeparateBR"><br>
<br>
</div>
<div class="yahoo_quoted" id="yui_3_16_0_1_1420586343585_11680"
style="display: block;">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, sans-serif; font-size:
16px;" id="yui_3_16_0_1_1420586343585_11679">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, sans-serif; font-size:
16px;" id="yui_3_16_0_1_1420586343585_11678">
<div class="y_msg_container"
id="yui_3_16_0_1_1420586343585_11690">
<div id="yiv4954325490">
<div id="yui_3_16_0_1_1420586343585_11689">
<div
style="color:#000;background-color:#fff;font-family:HelveticaNeue,
Helvetica Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px;"
id="yui_3_16_0_1_1420586343585_11688">
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr"><br>
</div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr">I am trying to make a HTTP PUT request
to assign admin role to a given user in a given
domain: </div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr"><br>
</div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr"><a moz-do-not-send="true"
rel="nofollow" target="_blank" onclick="return
theMainWindow.showLinkWarning(this)"
href="http://10.0.1.87:8000/v1/openstack/keystone/v3/domains/16faa0dcebc94ca0ad83807d5c628754/users/bd0bf9040f0a47ce9cd09610f4c7dc17/roles/52580a3e2e164aca9e46b8c013bc7e18"
id="yiv4954325490yui_3_16_0_1_1420586343585_6649">http://host:port/keystone/v3/domains/16faa0dcebc94ca0ad83807d5c628754/users/bd0bf9040f0a47ce9cd09610f4c7dc17/roles/52580a3e2e164aca9e46b8c013bc7e18</a> as
per the documentation in <a
moz-do-not-send="true" rel="nofollow"
target="_blank"
href="http://developer.openstack.org/api-ref-identity-v3.html"
class="yiv4954325490" style=""
id="yiv4954325490yui_3_16_0_1_1420586343585_7384">http://developer.openstack.org/api-ref-identity-v3.html</a> but
<b
id="yiv4954325490yui_3_16_0_1_1420586343585_7379">I
get a HTTP 403 error</b>. I am quite sure the
domain, user and role IDs are valid. Any idea
what I might be doing wrong? Do I have to set
any special flags in keystone for this to
succeed?<br>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</blockquote>
<br>
<br>
No special flags, but the user making the call needs permissions to
do it. If you are using an admin token to make the call, then one
of your other assumptions is false.<br>
<blockquote
cite="mid:1834834939.3292573.1420586822632.JavaMail.yahoo@jws10062.mail.ne1.yahoo.com"
type="cite">
<div style="color:#000; background-color:#fff;
font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial,
Lucida Grande, sans-serif;font-size:16px">
<div class="yahoo_quoted" id="yui_3_16_0_1_1420586343585_11680"
style="display: block;">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, sans-serif; font-size:
16px;" id="yui_3_16_0_1_1420586343585_11679">
<div style="font-family: HelveticaNeue, Helvetica Neue,
Helvetica, Arial, Lucida Grande, sans-serif; font-size:
16px;" id="yui_3_16_0_1_1420586343585_11678">
<div class="y_msg_container"
id="yui_3_16_0_1_1420586343585_11690">
<div id="yiv4954325490">
<div id="yui_3_16_0_1_1420586343585_11689">
<div
style="color:#000;background-color:#fff;font-family:HelveticaNeue,
Helvetica Neue, Helvetica, Arial, Lucida Grande,
sans-serif;font-size:16px;"
id="yui_3_16_0_1_1420586343585_11688">
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr"><br>
</div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr">Regards,</div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr">-Deep.</div>
<div
id="yiv4954325490yui_3_16_0_1_1420586343585_6605"
dir="ltr" class="yiv4954325490" style=""><br
class="yiv4954325490" style="">
</div>
</div>
</div>
</div>
<br>
<br>
</div>
</div>
</div>
</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
Openstack-security mailing list
<a class="moz-txt-link-abbreviated" href="mailto:Openstack-security@lists.openstack.org">Openstack-security@lists.openstack.org</a>
<a class="moz-txt-link-freetext" href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-security</a>
</pre>
</blockquote>
<br>
</body>
</html>