From keystone's perspective, the ``member`` and ``reader`` roles are
effectively the same, isolating writable idp operations to the
``admin`` role.
This commit adds explicit testing to make sure the ``member`` role is
allowed to perform readable and not writable idp operations.
Subsequent patches will incorporate:
- system admin functionality
- domain users test coverage
- project users test coverage
Reviewed: https:/ /review. openstack. org/619372 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=c347c4ff2f2 e7c057da2ff0c65 8a3079580df41f
Committed: https:/
Submitter: Zuul
Branch: master
commit c347c4ff2f2e7c0 57da2ff0c658a30 79580df41f
Author: Lance Bragstad <email address hidden>
Date: Wed Nov 21 21:52:20 2018 +0000
Add idp tests for system member role
From keystone's perspective, the ``member`` and ``reader`` roles are
effectively the same, isolating writable idp operations to the
``admin`` role.
This commit adds explicit testing to make sure the ``member`` role is
allowed to perform readable and not writable idp operations.
Subsequent patches will incorporate:
- system admin functionality
- domain users test coverage
- project users test coverage
Related-Bug: 1804517
Related-Bug: 1804516
Change-Id: Ib738c18380f567 d0a0b24e218350c 9e1cd33691f