Require authz to update user's tenant (bug 1040626)

Change-Id: I82f80b84af2bc4db00b3dcb87a2ec338816a82e9
openstack · Aug 30, 2012 · 5438d3b · 5438d3b
1 parent a16a0ab
commit 5438d3b
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/keystone/identity/core.py b/keystone/identity/core.py
@@ -436,6 +436,7 @@ def set_user_password(self, context, user_id, user):
 
     def update_user_tenant(self, context, user_id, user):
         """Update the default tenant."""
+        self.assert_admin(context)
         # ensure that we're a member of that tenant
         tenant_id = user.get('tenantId')
         self.identity_api.add_user_to_tenant(context, tenant_id, user_id)