Do not validate user when creating assignments

Registered by Adam Young on 2013-12-10

Creating an assignment may happen in the absence of User data. For Federation, a user listing may not even be possible. Even in LDAP and SQL cases, an admin may need to create role assignments prior to a valid user object being available. Same is tru for groups. These checks are unnecessary, and can and should be removed.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Low
Drafter:
Adam Young
Direction:
Needs approval
Assignee:
Brant Knudson
Definition:
New
Series goal:
Accepted for icehouse
Implementation:
Implemented
Milestone target:
milestone icon 2014.1
Started by
Thierry Carrez on 2014-01-14
Completed by
Dolph Mathews on 2014-03-01

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/no-check-id,n,z

Addressed by: https://review.openstack.org/54647 (merged)
    Fix assignment to not use identity

This is blocked by changing assertions made in tempest; either of two proposed changes would suffice:
  https://review.openstack.org/#/c/56106/
  https://review.openstack.org/#/c/68453/

Addressed by: https://review.openstack.org/69994 (merged)
    Update kvs assignment backend docs

Addressed by: https://review.openstack.org/70044 (merged)
    Fix assignment KVS backend to not use identity

Addressed by: https://review.openstack.org/72097 (merged)
    Add test for list project users when no user

Addressed by: https://review.openstack.org/72098 (merged)
    Add test for create grant when no user

Addressed by: https://review.openstack.org/72102 (merged)
    Add test for create grant when no group

Addressed by: https://review.openstack.org/72106 (merged)
    Fix get project users when no user exists

Addressed by: https://review.openstack.org/72142 (blocked by dolphm)
    Fix create grant when no user

Addressed by: https://review.openstack.org/72144 (blocked by dolphm)
    Fix create grant when no group

Addressed by: https://review.openstack.org/70272 (abandoned)
    Assignment returns fake user for unknown users

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.