Comment 9 for bug 1479569

Revision history for this message
Lin Hua Cheng (lin-hua-cheng) wrote :

@Steve: this API is used in horizon, for the project/domain role assignment panel.

The way it works right now is not pretty:
1. Fetch All Role Assignment for a Project or Domain
2. Fetch All Roles
3. Fetch All Users

Map the Role Assignment to #2 and #3 to render the user and role name.

There is some work ongoing to make Domain Admin and Project Admin use case work in Horizon, in testing the use case for HMT where Project Admin should be able to manage users of it subproject, they hit an issue with the call for #3 (Fetch All Users), because Project Admin doesn't have access to see all Users.