Assignment Manager Cleanup

Registered by Samuel de Medeiros Queiroz on 2015-02-17

The assignment manager [1] contains several methods to list actors, roles and targets based on the role assignments.
They implement assignment inheritance and grouping expansion logic.

The list_role_assignments method correctly implement both inherited assignments and grouping logic.
Then, instead of repeating code, those methods should call it and then get the information need to return.

For example, list_projects_for_user should list effective role assignments for the given users and then return the distinct projects that user has a role on.

[1] https://github.com/openstack/keystone/blob/master/keystone/assignment/core.py

This was discussed during the Keystone IRC meeting on 2/14/15, and it was agreed that this does not need a spec.

Blueprint information

Status:
Complete
Approver:
Steve Martinelli
Priority:
Low
Drafter:
Samuel de Medeiros Queiroz
Direction:
Approved
Assignee:
Samuel de Medeiros Queiroz
Definition:
Approved
Series goal:
Accepted for mitaka
Implementation:
Implemented
Milestone target:
milestone icon mitaka-3
Started by
Steve Martinelli on 2015-12-14
Completed by
Steve Martinelli on 2016-02-02

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/assignment-manager-cleanup,n,z

Addressed by: https://review.openstack.org/158163 (merged)
    Exposes bug in Federation list projects endpoint

Addressed by: https://review.openstack.org/242513 (merged)
    Use list_role_assignments to get projects/domains for user

Addressed by: https://review.openstack.org/242529 (merged)
    Use list_role_assignments to get assignments by role_id

Addressed by: https://review.openstack.org/242853 (merged)
    Create new version of assignment driver interface

Gerrit topic: https://review.openstack.org/#q,topic:bp/implied-roles,n,z

Gerrit topic: https://review.openstack.org/#q,topic:bp/implied-roles-patch21,n,z

Addressed by: https://review.openstack.org/247805 (merged)
    Create V9 Role Driver

Addressed by: https://review.openstack.org/240720 (merged)
    Updated Cloudsample

Addressed by: https://review.openstack.org/265650
    Enhance manager list_role_assignments to support group listing

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.