clean tenant permissions for objects when deleteing tenant

[Dafna Ron]

I created a tenant and added it as a member on an image.

[root@opens-XXXX ~(keystone_admin)]# keystone tenant-create --name blabla
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | 13583923a73848179e06cda4bac1b064 |
| name | blabla |

[root@opens-XXXX ~(keystone_admin)]# keystone tenant-list
+----------------------------------+-------------+---------+
| id | name | enabled |
+----------------------------------+-------------+---------+
| ad326a6c11a742c6bfdf4ad63be0c889 | admin | True |
| 13583923a73848179e06cda4bac1b064 | blabla | True |
| e91123ca35724285a783f33103875dcb | dafna | True |
| b730cd0430114a24871916d7f112538d | new_project | True |
| 5266b423a0324fca9958e59a5a13459a | services | True |
+----------------------------------+-------------+---------+

I added the tenant as a member on an image:

[root@opens-XXXX ~(keystone_admin)]# glance member-list --image-id 282f2a9a-ab26-4a68-93c3-f534111ba76b
+--------------------------------------+----------------------------------+-----------+
| Image ID | Member ID | Can Share |
+--------------------------------------+----------------------------------+-----------+
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | 13583923a73848179e06cda4bac1b064 | |
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | b730cd0430114a24871916d7f112538d | |
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | e91123ca35724285a783f33103875dcb | |
+--------------------------------------+----------------------------------+-----------+

Than I deleted the tenant:

[root@opens-XXXX ~(keystone_admin)]# keystone tenant-delete 13583923a73848179e06cda4bac1b064

The tenant still appears as a member on the object:

[root@opens-XXXX ~(keystone_admin)]# glance member-list --image-id 282f2a9a-ab26-4a68-93c3-f534111ba76b
+--------------------------------------+----------------------------------+-----------+
| Image ID | Member ID | Can Share |
+--------------------------------------+----------------------------------+-----------+
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | 13583923a73848179e06cda4bac1b064 | |
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | b730cd0430114a24871916d7f112538d | |
| 282f2a9a-ab26-4a68-93c3-f534111ba76b | e91123ca35724285a783f33103875dcb | |
+--------------------------------------+----------------------------------+-----------+

I think that if we delete the tenant we should clean permissions that were added to it on different objects.

[Dolph Mathews (dolph)]

Adding glance to bug 967832 and broadening the scope of that bug as a result.