This commit introduces the system reader role to the group API, making
it easier for administrators to delegate subsets of responsibilities
to the API by default. This commit also maintains the ability for
any user to be able to fetch their own group memberships, which
encapsulates a bunch of tests for what regular project users can do
with groups.
Subsequent patches will incorporate:
- system member test coverage
- system admin functionality
- domain reader functionality
- domain member test coverage
- domain admin functionality
Reviewed: https:/ /review. openstack. org/625732 /git.openstack. org/cgit/ openstack/ keystone/ commit/ ?id=feb0d58df4c e4531d3e381c243 85a531d164ee2a
Committed: https:/
Submitter: Zuul
Branch: master
commit feb0d58df4ce453 1d3e381c24385a5 31d164ee2a
Author: Lance Bragstad <email address hidden>
Date: Mon Dec 17 22:40:04 2018 +0000
Implement system reader role for groups
This commit introduces the system reader role to the group API, making
it easier for administrators to delegate subsets of responsibilities
to the API by default. This commit also maintains the ability for
any user to be able to fetch their own group memberships, which
encapsulates a bunch of tests for what regular project users can do
with groups.
Subsequent patches will incorporate:
- system member test coverage
- system admin functionality
- domain reader functionality
- domain member test coverage
- domain admin functionality
Change-Id: I24ff27da79bb01 322e05c6d8cd37f 02693fd5b9f
Related-Bug: 1805369
Related-Bug: 1808859
Related-Bug: 968696