Open Stack

Hi,

In havana the user must have admin privileges to be able to create heat
stacks having e.g. HARestarter resource. Otherwise an error will occur...

What's logic behind this / or is this a bug?

2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/v2_0/users.py", line 97,
in create
2013-09-19 17:56:11.380 TRACE heat.engine.resource     return
self._create('/users', params, "user")
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/base.py", line 146, in
_create
2013-09-19 17:56:11.380 TRACE heat.engine.resource     return
self._post(url, body, response_key, return_raw)
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/base.py", line 159, in
_post
2013-09-19 17:56:11.380 TRACE heat.engine.resource     resp, body =
self.client.post(url, body=body)
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 660,
in post
2013-09-19 17:56:11.380 TRACE heat.engine.resource     return
self._cs_request(url, 'POST', **kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 650,
in _cs_request
2013-09-19 17:56:11.380 TRACE heat.engine.resource     **kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 609,
in request
2013-09-19 17:56:11.380 TRACE heat.engine.resource     **request_kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource   File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 123,
in request
2013-09-19 17:56:11.380 TRACE heat.engine.resource     raise
exceptions.from_response(resp, method, url)
2013-09-19 17:56:11.380 TRACE heat.engine.resource Forbidden: You are not
authorized to perform the requested action, admin_required. (HTTP 403)

Thanks,
-Juha
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130920/1221bc43/attachment.html>