grizzly: domain role assignment

[Tom Fifield]

If https://review.openstack.org/#/c/18706/ is merged, the identity-api adds functionality to specify the target of a domain role grant

    When a user or group domain role grant is made, we need to be able
    to specify whether this grant is
    a) Purely for the domain entity (for instance, to allow a domain
       administrtor to maintain only the users or projects in their domain)
    b) As a shorthand for applying the role grant to all projects
       within that domain

    This is proposed by passing a paramater to the PUT grant domain
    creation calls.

docs in the patch

[Diane Fleming (diane-fleming)]

It's not clear from this bug description what needs to change in the docs.

I assume it's these two calls that need to be modified, but how?

http://developer.openstack.org/api-ref-identity-v3.html#grantDomainUserRole

http://developer.openstack.org/api-ref-identity-v3.html#grantDomainGroupRole

[Anne Gentle (annegentle)]

I think this bug can be marked completed -- there's a PUT statement for users and a domain_id parameter. The policy is what actually enforces it so that's different from the API doc, I think the API doc is complete.