Split the Identity Backend

Registered by Adam Young on 2013-05-01

Split the identity backend into two separate backends: Identity (users and groups) and assignments projects (domains, projects, roles, role assignments).

Blueprint information

Status:
Complete
Approver:
None
Priority:
Medium
Drafter:
Adam Young
Direction:
Needs approval
Assignee:
Adam Young
Definition:
Drafting
Series goal:
Accepted for havana
Implementation:
Implemented
Milestone target:
milestone icon 2013.2
Started by
Dolph Mathews on 2013-05-21
Completed by
Dolph Mathews on 2013-07-16

Related branches

Sprints

Whiteboard

Hi Adam

the only changes I would suggest to the full specification are
 > Identity and Project: Domain will stay with
there is a typo here as you have not said what Domain stays with. I would suggest Project since Domain is an Authz attribute, not an identity attribute.

   > Split Domain from Identity
this would then become, Split Domain from Project

regards
David

Can you reduce the scope of this bp to reflect bp domain-backend and bp extract-credentials-id? -dolph
Dolph: done.

Gerrit topic: https://review.openstack.org/#q,topic:bp/split-identity,n,z

Addressed by: https://review.openstack.org/33745
    assignment backend

Addressed by: https://review.openstack.org/34254
    Manager instead of direct driver

Gerrit topic: https://review.openstack.org/#q,topic:bug/1193420,n,z

Addressed by: https://review.openstack.org/34967
    Mixed LDAP/SQL Backend.

Gerrit topic: https://review.openstack.org/#q,topic:bug/967832,n,z

Addressed by: https://review.openstack.org/43340
    Add project CRUD to assignment_api Manager

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

This blueprint contains Public information 
Everyone can see this information.