Add is_domain to the token

Registered by Henry Nash

This blueprint has been superseded. See the newer blueprint "reseller (phase 1): top level projects as domains" for updated plans.

When a project token to be issued on a project acting as a domain, we should include is_domain=True in the token. By doing this, you can write policy rules that use project tokens to manage access to domain related entities (like users). We should still keep domain tokens for now, but this would be a step towards removing them.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
Henry Nash
Direction:
Needs approval
Assignee:
None
Definition:
Superseded
Series goal:
None
Implementation:
Unknown
Milestone target:
None
Completed by
Steve Martinelli

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/add-isdomain-to-token,n,z

Addressed by: https://review.openstack.org/193543
    Add is_domain to tokens for projects acting as a domain

Addressed by: https://review.openstack.org/153007
    API changes for Reseller

Gerrit topic: https://review.openstack.org/#q,topic:bp/reseller,n,z

Addressed by: https://review.openstack.org/158372
    Change project name constraint

Addressed by: https://review.openstack.org/197331
    Add is_domain in token response

Addressed by: https://review.openstack.org/161854
    Bye Bye Domain Table

Addressed by: https://review.openstack.org/165936
    Remove domain table references

Addressed by: https://review.openstack.org/143763
    Honor domain operations in project table

Addressed by: https://review.openstack.org/206063
    WIP: Change policy to comply with is_domain in token

Addressed by: https://review.openstack.org/157427
    Add is_domain field in Project Table

Addressed by: https://review.openstack.org/211219
    Creating tests for projects acting as domains

Addressed by: https://review.openstack.org/209132
    Limit subtree and parents queries

Addressed by: https://review.openstack.org/211170
    Replicate domain info in projects table

Addressed by: https://review.openstack.org/210600
    Add is_domain parameter to get_project_by_name

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.