Skip to content

log error when non admin_domain user is trying list_domains #269

@AlvaroVega

Description

@AlvaroVega

Request with no admin_domain user:

GET | https://localhost/orc/service

is obtaining response:
"(403, 'You are not authorized to perform the requested action: identity:list_domains.')"

and producing the following log error in keystone:

keystone.server.flask.application [None req-d4583859-5c91-4735-9e8b-1a945e80edb1 edbe77e523cc4c49a6
154d01853422fa - d561a79e89be4d42b17a38b0dcb7d2c4 - d561a79e89be4d42b17a38b0dcb7d2c4 -] You are not authorized to perform the requested action: identity:list_domains.: keystone.exception.ForbiddenAction: You are not authorized to perform the requested action: identity:list_domains

Including stack:

2025-05-06 08:00:33.983203 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application Traceback (most recent call last):
2025-05-06 08:00:33.983204 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application   File "/usr/lib/python3.9/site-packages/flask/app.py", line 1820
, in full_dispatch_request
2025-05-06 08:00:33.983205 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application     rv = self.dispatch_request()
2025-05-06 08:00:33.983206 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application   File "/usr/lib/python3.9/site-packages/flask/app.py", line 1796
, in dispatch_request
2025-05-06 08:00:33.983206 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application     return self.ensure_sync(self.view_functions[rule.endpoint])(*
*view_args)
2025-05-06 08:00:33.983207 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application   File "/usr/lib/python3.9/site-packages/flask_restful/__init__.p
y", line 467, in wrapper
2025-05-06 08:00:33.983208 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application     resp = resource(*args, **kwargs)
2025-05-06 08:00:33.983208 2025-05-06 08:00:33.982 124 ERROR keystone.server.fla
sk.application   File "/usr/lib/python3.9/site-packages/flask/views.py", line 10
7, in view
2025-05-06 08:00:33.983210 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     return current_app.ensure_sync(self.dispatch_request)(**kwargs)
2025-05-06 08:00:33.983210 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/flask_restful/__init__.py", line 582, in dispatch_request
2025-05-06 08:00:33.983211 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     resp = meth(*args, **kwargs)
2025-05-06 08:00:33.983212 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/keystone/api/domains.py", line 90, in get
2025-05-06 08:00:33.983212 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     return self._list_domains()
2025-05-06 08:00:33.983213 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/keystone/api/domains.py"
ç line 102, in _list_domains
2025-05-06 08:00:33.983214 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     ENFORCER.enforce_call(action='identity:list_domains',
2025-05-06 08:00:33.983215 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/keystone/common/rbac_enforcer/enforcer.py", line 455, in enforce_call
2025-05-06 08:00:33.983215 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     enforcer_obj._enforce(
2025-05-06 08:00:33.983216 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/keystone/common/rbac_enforcer/enforcer.py", line 125, in _enforce
2025-05-06 08:00:33.983217 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application     result = self._enforcer.enforce(
2025-05-06 08:00:33.983217 2025-05-06 08:00:33.982 124 ERROR keystone.server.flask.application   File "/usr/lib/python3.9/site-packages/oslo_policy/policy.py", line 1088, in enforce

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions