allow edit of user role

[Dafna Ron]

I think it would be helpful to allow changing and updating a user's role from horizon

root@tigris01 ~(keystone_admin)]# keystone help |grep role
    role-create Create new role.
    role-delete Delete role.
    role-get Display role details.
    role-list List all roles.
    user-role-add Add role to user.
    user-role-list List roles granted to a user.
    user-role-remove Remove role from user.
    bootstrap Grants a new role to a new user on a new tenant, after
[root@tigris01 ~(keystone_admin)]# keystone help user-role-add
usage: keystone user-role-add --user <user> --role <role> [--tenant <tenant>]

Add role to user.

we can actually user role-delete + role-create or role-create + --role <role>, --role-id <role>, --role_id <role>

[Gary W. Smith (gary-w-smith)]

+1
Before working on this bug, please submit a blueprint for this new functionality.

[Julie Pichon (jpichon)]

Isn't it already possible to do this?

When enabling Keystone v3 ( https://github.com/openstack/horizon/blob/d5fea888a8/openstack_dashboard/local/local_settings.py.example#L36 ), the admin gets access to a new Role panel under "Identity" and can create/add new roles.

Then because adding a role is done in the context of a project, when one adds Users to a Project which roles to give are also selectable in the "Modify Users" tab (the drop-down within the drop-down). That's possible with v2 and v3.

Am I misunderstanding what this is about?

[Nikunj Aggarwal (nikunj2512)]

Hi Julie,

You are right. Yes, it is possible. I think then this bug is invalid.

[Gary W. Smith (gary-w-smith)]

I missed this too, as I also was using Keystone v2. Thanks, Julie

[Julie Pichon (jpichon)]

Cool, thank you for the follow-up!