allow adding multiple roles for same user

[Dafna Ron]

[root@tigris01 ~(keystone_admin)]# keystone help user-role-add
usage: keystone user-role-add --user <user> --role <role> [--tenant <tenant>]

Add role to user.

Arguments:
  --user <user>, --user-id <user>, --user_id <user>
                        Name or ID of user.
  --role <role>, --role-id <role>, --role_id <role>
                        Name or ID of role.
  --tenant <tenant>, --tenant-id <tenant>
                        Name or ID of tenant.

in cli we can add multiple roles but can only add one in horizon. it would be good if we can add more than one role

[Gary W. Smith (gary-w-smith)]

+1
Thanks for identifying gaps in horizon functionality!

Before working on this bug, please submit a blueprint for this new functionality.

[Julie Gravel (julie-gravel)]

I registered a BP for this: https://blueprints.launchpad.net/horizon/+spec/allow-multiple-roles-for-same-user.

[Dafna Ron (dron-3)]

Thanks Julie :)

[Lin Hua Cheng (lin-hua-cheng)]

Multiple roles can be added to the user using the Project panel and not through the User panel. The reason for that is because roles assignment are scoped to the Project.

[Dafna Ron (dron-3)]

so from the users panel I can create a user with one role (and I can view and select all available roles so it's not a permissions limitation issue) but to add more than one role I have to go to the Project panel? that makes no scene... :) I think this is very confusing...

[Alexis Rivera (gardlt)]

I agree. if we are allowing the user to have multiple roles after creation, then the user should be able to do it both at creation time and at any point afterwards.

[Akihiro Motoki (amotoki)]

As of now, the current "Manage Members" form of "Project" panel supports multiple role association. This is no longer a valid bug.