This commit opens up the assignment API for system readers and system
members to list and check grants for users and groups on projects and
domains. Subsequent patches will:
- refactor system admin policy checks
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.v3cloudsample.json
Reviewed: https:/ /review. openstack. org/645889 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=d1cfa3ab3f8 7f15f61c5387670 d3b75ee2ba93ba
Committed: https:/
Submitter: Zuul
Branch: master
commit d1cfa3ab3f87f15 f61c5387670d3b7 5ee2ba93ba
Author: Lance Bragstad <email address hidden>
Date: Fri Mar 22 21:08:25 2019 +0000
Implement system reader functionality for grants
This commit opens up the assignment API for system readers and system
members to list and check grants for users and groups on projects and
domains. Subsequent patches will:
- refactor system admin policy checks v3cloudsample. json
- implement domain reader and member support
- implement domain admin support
- introduce test coverage for project users and the grants API
- remove redundant policies from policy.
Change-Id: I04bafe2f7c83ad dddf18591eaeba8 0277321139b
Related-Bug: 1805368
Related-Bug: 1750669
Related-Bug: 1806762