All user tokens are considered revoked on it's group role revocation

[Alexander Makarov]

The case for the bug:
- User authenticates and receives a token scoped to the project1
- User authenticates and receives a token scoped to the project2
- User joins the group
- Group is granted a role to the project1
- Group role grant to the project1 is revoked

Result:
All user tokens are considered revoked.

Analysis:
Revoke model lacks correct token by group revocation - it is done through revocation by user, what results in described effect.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/141854

[Alexander Makarov (amakarov)]

Notifiers in unit-tests use RabbitMQ as a transport

[OpenStack Infra (hudson-openstack)]

Change abandoned by Dolph Mathews (<email address hidden>) on branch: master
Review: https://review.openstack.org/140790
Reason: this looks to have been addressed in master by https://github.com/openstack/keystone/commit/367fcd70368e96db6ffaee58352fbd3b0e1105cb

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/kilo
Review: https://review.openstack.org/216354

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/216354
Committed: https://git.openstack.org/cgit/openstack/keystone/commit/?id=369d08d1c6f1c30abb09440b3ed06e7e5266b1ec
Submitter: Jenkins
Branch: stable/kilo

commit 369d08d1c6f1c30abb09440b3ed06e7e5266b1ec
Author: Alexander Makarov <email address hidden>
Date: Mon Dec 15 20:25:01 2014 +0300

    Group role revocation invalidates all user tokens

    Keystone invalidates every token for a user after revoking one group role
    within one project.

    This patch replaces 'invalidate user's everything' logic with revocation by
    grant via notifications for delete_grant assignment operation.

    Closes-Bug: #1402760
    Closes-Bug: #1401926
    (cherry picked from commit 2cf743d6de3afcb1a0aa3d4c219b3c4bcea29008)

    There was one conflict fixed by hand in core.py. The test case had to be
    adjusted as driver='kvs' and driver='uuid' (test_v3_auth.py)
    will not work in the stable/kilo release.

    # Conflicts:
    #>------keystone/assignment/core.py

    Change-Id: If9d0fefe43da96ba5e6b6ffc809b9f15e8d732f7