{"action":"created","issue":{"url":"https://api.github.com/repos/openshift/origin/issues/9000","repository_url":"https://api.github.com/repos/openshift/origin","labels_url":"https://api.github.com/repos/openshift/origin/issues/9000/labels{/name}","comments_url":"https://api.github.com/repos/openshift/origin/issues/9000/comments","events_url":"https://api.github.com/repos/openshift/origin/issues/9000/events","html_url":"https://github.com/openshift/origin/issues/9000","id":156510855,"number":9000,"title":"Regression: oc policy add-role-to-group registry-viewer now says \"Attempt to grant extra privileges\"","user":{"login":"stefwalter","id":795070,"avatar_url":"https://avatars.githubusercontent.com/u/795070?v=3","gravatar_id":"","url":"https://api.github.com/users/stefwalter","html_url":"https://github.com/stefwalter","followers_url":"https://api.github.com/users/stefwalter/followers","following_url":"https://api.github.com/users/stefwalter/following{/other_user}","gists_url":"https://api.github.com/users/stefwalter/gists{/gist_id}","starred_url":"https://api.github.com/users/stefwalter/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/stefwalter/subscriptions","organizations_url":"https://api.github.com/users/stefwalter/orgs","repos_url":"https://api.github.com/users/stefwalter/repos","events_url":"https://api.github.com/users/stefwalter/events{/privacy}","received_events_url":"https://api.github.com/users/stefwalter/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-05-24T13:43:04Z","updated_at":"2016-05-24T13:48:51Z","closed_at":null,"body":"A user who created and is admin of a project can no longer \"add-role-to-group\" on that project. This functionality is/was used by the Atomic Registry.\r\n\r\n##### Version\r\n\r\n```\r\nopenshift v1.3.0-alpha.0-613-g3c29434\r\nkubernetes v1.3.0-alpha.1-331-g0522e63\r\netcd 2.3.0\r\n```\r\n\r\n##### Steps To Reproduce\r\n```\r\n$ printf \"scruffy\\r\\nscruffy\\r\\n\" | oc login\r\n...\r\n$ oc new-project zerog\r\n...\r\n$ oc policy add-role-to-group registry-viewer system:authenticated -n zerog\r\n```\r\n\r\n##### Current Result\r\n\r\n```\r\nerror: You must be logged in to the server (attempt to grant extra privileges: [\r\n... massive output ...\r\n```\r\n\r\n##### Expected Result\r\n\r\nSuccess. No output.\r\n\r\n##### Additional Information\r\n\r\nUsed to work with the following openshift version:\r\n\r\n```\r\nopenshift v1.1.6-48-g561e4fa\r\nkubernetes v1.2.0-36-g4a3f9c5\r\netcd 2.2.5\r\n```"},"comment":{"url":"https://api.github.com/repos/openshift/origin/issues/comments/221275231","html_url":"https://github.com/openshift/origin/issues/9000#issuecomment-221275231","issue_url":"https://api.github.com/repos/openshift/origin/issues/9000","id":221275231,"user":{"login":"liggitt","id":980082,"avatar_url":"https://avatars.githubusercontent.com/u/980082?v=3","gravatar_id":"","url":"https://api.github.com/users/liggitt","html_url":"https://github.com/liggitt","followers_url":"https://api.github.com/users/liggitt/followers","following_url":"https://api.github.com/users/liggitt/following{/other_user}","gists_url":"https://api.github.com/users/liggitt/gists{/gist_id}","starred_url":"https://api.github.com/users/liggitt/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/liggitt/subscriptions","organizations_url":"https://api.github.com/users/liggitt/orgs","repos_url":"https://api.github.com/users/liggitt/repos","events_url":"https://api.github.com/users/liggitt/events{/privacy}","received_events_url":"https://api.github.com/users/liggitt/received_events","type":"User","site_admin":false},"created_at":"2016-05-24T13:48:51Z","updated_at":"2016-05-24T13:48:51Z","body":"What role does that user have and what role are they trying to grant? The role being granted has more permissions than the role they have, apparently"}}
{"actor":{"display_login":"liggitt"}}