Open Stack

If you revoke a project-scoped token, I believe the only revocation
event should should see is one based on an audit ID.

** Changed in: keystone
   Importance: Undecided => High

** Changed in: keystone
    Milestone: None => kilo-rc1

** Changed in: keystone
       Status: New => Triaged

** Summary changed:

- Revocation causes duplicate events in revocation table
+ Revocation causes duplicate (and overly broad?) events in revocation table

-- 
You received this bug notification because you are a member of OpenStack
Security Group, which is subscribed to OpenStack.
https://bugs.launchpad.net/bugs/1430951

Title:
  Revocation causes duplicate (and overly broad?) events in revocation
  table

Status in OpenStack Identity (Keystone):
  Triaged

Bug description:
  Revoke a project scoped token

  You see 3 entries in revocation_event table

  1) (id, user_id, project_id, role_id, issued_before)
  2) (id, user_id,, issued_before)
  3) (id, user_id,, issued_before)

  2 & 3 are redundant.  Definitely  3) is redundant as it is  same as 2)

  BTW, this from  master branch as of 3/11/2015

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1430951/+subscriptions