This change enables a system admin to delete trusts. Previously, only
the trustor or the is_admin admin could delete a trust. This changes
makes the trusts API more useful to system administrators who need to
clean up trusts and makes the API consistent with others.
This does not enable system admins to create trusts. A trust can only be
scoped to a project, so creating one is inherently a project-scoped
action. If trusts later gain the ability to be scoped to the system or
domains, we can add those scopes to the create_trust scope_types.
Reviewed: https:/ /review. opendev. org/677004 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=9be1caff973 55099d25170fe39 0dd15d6f592d56
Committed: https:/
Submitter: Zuul
Branch: master
commit 9be1caff9735509 9d25170fe390dd1 5d6f592d56
Author: Colleen Murphy <email address hidden>
Date: Fri Aug 16 11:14:16 2019 -0700
Implement system admin for trusts API
This change enables a system admin to delete trusts. Previously, only
the trustor or the is_admin admin could delete a trust. This changes
makes the trusts API more useful to system administrators who need to
clean up trusts and makes the API consistent with others.
This does not enable system admins to create trusts. A trust can only be
scoped to a project, so creating one is inherently a project-scoped
action. If trusts later gain the ability to be scoped to the system or
domains, we can add those scopes to the create_trust scope_types.
Change-Id: Idf13b862f34538 8bb237260978794 7eb43d7ba75
Closes-bug: #1818846
Closes-bug: #1818850
Related-Bug: #968696