This commit opens up the assignment API for system readers and system
members to list and check grants for users and groups on projects and
domains. Subsequent patches will:
- refactor system admin policy checks
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/647814 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=db3b293cdea 31b5a2b4fab1108 d905832ee15550
Committed: https:/
Submitter: Zuul
Branch: stable/stein
commit db3b293cdea31b5 a2b4fab1108d905 832ee15550
Author: Lance Bragstad <email address hidden>
Date: Fri Mar 22 21:08:25 2019 +0000
Implement system reader functionality for grants
This commit opens up the assignment API for system readers and system
members to list and check grants for users and groups on projects and
domains. Subsequent patches will:
- refactor system admin policy checks v3cloudsample. json
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.
Change-Id: I04bafe2f7c83ad dddf18591eaeba8 0277321139b f61c5387670d3b7 5ee2ba93ba)
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762
(cherry picked from commit d1cfa3ab3f87f15