The problem is due to the openstack-dashboard charm's keystonev3_policy.json file which requires that the target.group.domain_id matches the current admin's id. The "Delete Groups" button depends on the delete_groups policy but the policy depends on the target.group.domain_id in order to be valid. The "Delete Groups" button does not have a group context associated when it is rendered and thus does not pass the policy.
This is fixed by simply removing the target.group.domain_id from the policy file as the group is only shown in the proper domain context. It's also safe to do as the final ability to remove the group is held within keystone policy configuration itself, which will does have the proper target check because it is supplied as part of a delete api call. -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1775229 Title: "Delete Groups" button is missing for a domain admin user To manage notifications about this bug go to: https://bugs.launchpad.net/charm-openstack-dashboard/+bug/1775229/+subscriptions -- ubuntu-bugs mailing list ubuntu-bugs@lists.ubuntu.com https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
