List role assignments filters performance

[Samuel de Medeiros Queiroz]

When listing role assignments, we have the option to filter them by actor, target and role.
As Henry Nash pointed out at [1] , the current implementation uses the standard filtering the V3.wrap_collection. Given the large number of individual assignments, this is pretty inefficient.

The controller should pass the filters into the driver call, so that the list size is kept a minimum.
For example, if the user wants to filter role assignments by project X, the driver would query the DB only selecting the role assignments where target_id = X.id, instead of querying everything and returning the result to be filtered by the controller.

[1] https://github.com/openstack/keystone/blob/498a0032db89997244d3dc7e65ce9b37eac84283/keystone/assignment/controllers.py#L860-L864

[David Stanek (dstanek)]

I agree that this should be fixed for the assignment SQL backend.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/116682

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: feature/hierarchical-multitenancy
Review: https://review.openstack.org/118449

[OpenStack Infra (hudson-openstack)]

Change abandoned by Samuel de Medeiros Queiroz (<email address hidden>) on branch: feature/hierarchical-multitenancy
Review: https://review.openstack.org/118449
Reason: I did a mistake. This patch must be on the master branch
https://review.openstack.org/#/c/116682/

[OpenStack Infra (hudson-openstack)]

Change abandoned by Samuel de Medeiros Queiroz (<email address hidden>) on branch: feature/hierarchical-multitenancy
Review: https://review.openstack.org/118449

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/137202

[OpenStack Infra (hudson-openstack)]

Change abandoned by Samuel de Medeiros Queiroz (<email address hidden>) on branch: master
Review: https://review.openstack.org/116682
Reason: This change will come after the split of assignments backend.
So I'm rebasing this work there.

[Samuel de Medeiros Queiroz (samueldmq)]

Invalidated in favor of the created blueprint to fix this [1].

[1] https://blueprints.launchpad.net/keystone/+spec/list-role-assignments-performance