Hi,
In havana the user must have admin privileges to be able to create heat
stacks having e.g. HARestarter resource. Otherwise an error will occur...
What's logic behind this / or is this a bug?
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/v2_0/users.py", line 97,
in create
2013-09-19 17:56:11.380 TRACE heat.engine.resource return
self._create('/users', params, "user")
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/base.py", line 146, in
_create
2013-09-19 17:56:11.380 TRACE heat.engine.resource return
self._post(url, body, response_key, return_raw)
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/base.py", line 159, in
_post
2013-09-19 17:56:11.380 TRACE heat.engine.resource resp, body =
self.client.post(url, body=body)
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 660,
in post
2013-09-19 17:56:11.380 TRACE heat.engine.resource return
self._cs_request(url, 'POST', **kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 650,
in _cs_request
2013-09-19 17:56:11.380 TRACE heat.engine.resource **kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 609,
in request
2013-09-19 17:56:11.380 TRACE heat.engine.resource **request_kwargs)
2013-09-19 17:56:11.380 TRACE heat.engine.resource File
"/opt/stack/python-keystoneclient/keystoneclient/httpclient.py", line 123,
in request
2013-09-19 17:56:11.380 TRACE heat.engine.resource raise
exceptions.from_response(resp, method, url)
2013-09-19 17:56:11.380 TRACE heat.engine.resource Forbidden: You are not
authorized to perform the requested action, admin_required. (HTTP 403)
Thanks,
-Juha
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
