This commit removes system role assignments when querying keystone
for a list of assignments pertaining to a specific role. For example,
`GET /v3/role_assignments?role.id={role_id}`, now returns assignments
only for that role. Previously, the list contained false positives
because some system role assignments weren't being removed. This
was introduced in queens with the system scope work.
Change-Id: Iab35ae01bb715da5813e62cd09900de555dceaaa
Closes-Bug: 1748970
(cherry picked from commit 8748e729b2f139c245316fcece181625978c70a1)
Reviewed: https:/ /review. openstack. org/544096 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=a1ea04de86e bc57e7c2ba142c3 46f54aa93745c1
Committed: https:/
Submitter: Zuul
Branch: stable/queens
commit a1ea04de86ebc57 e7c2ba142c346f5 4aa93745c1
Author: Lance Bragstad <email address hidden>
Date: Tue Feb 13 17:09:55 2018 +0000
Fix querying role_assignment with system roles
This commit removes system role assignments when querying keystone assignments? role.id= {role_id} `, now returns assignments
for a list of assignments pertaining to a specific role. For example,
`GET /v3/role_
only for that role. Previously, the list contained false positives
because some system role assignments weren't being removed. This
was introduced in queens with the system scope work.
Change-Id: Iab35ae01bb715d a5813e62cd09900 de555dceaaa 245316fcece1816 25978c70a1)
Closes-Bug: 1748970
(cherry picked from commit 8748e729b2f139c