Provide an api to get all effective roles for a user

Registered by Henry Nash on 2013-06-07

The current v3 api specification includes an api for getting all roles for a user:

GET /users/{user_id}/roles

with the response actually being a list of role assignments (rather than just roles). Although this is part of the v3 spec, it is not actually implemented in Grizzly (it always returns an error). We should re-define (and implement) this api so that it is clear it is indeed for getting the effective role assignments that exist for a given user, whether these roles are directly assigned, by virtue of group membership or inherited from the parent domain.

Blueprint information

Status:
Complete
Approver:
Henry Nash
Priority:
High
Drafter:
Henry Nash
Direction:
Approved
Assignee:
Henry Nash
Definition:
Approved
Series goal:
Accepted for havana
Implementation:
Implemented
Milestone target:
milestone icon 2013.2
Started by
Henry Nash on 2013-07-02
Completed by
Henry Nash on 2013-07-08

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/get-role-assignments,n,z

Addressed by: https://review.openstack.org/34611
    Implement GET /role-assignment API call

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.