On 08/27/2015 02:25 AM, kevin parrikar wrote:
i have a user whose role was "_member_ "later changed to "heat_stack_user" and again changed to "_member_" but now the user is not able to do any heat commands as it returns "ERROR: You are not authorized to complete this action". for heat stack-list and other heat commands but "nova list "is working fine

I tried adding user to admin role

keystone user-role-add --user=user10 --tenant=tenant9 --role=admin

where "user10"  is member of 2-3 tenants:

But its still the same even with admin role.So i suppose when i changed the role something else also changed which i am not able to figure out.Can somebody help me in fixing this.


_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack



Did you change policy?

Use can have multiple roles, so admin, _member_ and heat_stack_user (while strange) could all be assigned to the same user. You might need both depending on your setup.
_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to