OpenStack Identity (keystone)

implied-roles

Registered by Adam Young

    When assignment of a superior role, user will also
    be assigned all roles implied by any prior roles
    The hierarchy of the roles will be expanded when
    issuing a token.

Blueprint information

Status:
Complete
Approver:
Steve Martinelli
Priority:
High
Drafter:
Adam Young
Direction:
Approved
Assignee:
Adam Young
Definition:
Approved
Series goal:
Accepted for mitaka
Implementation:
Implemented
Milestone target:
milestone icon mitaka-3
Started by
Adam Young
Completed by
Steve Martinelli

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/implied-roles,n,z

Addressed by: https://review.openstack.org/242614
    implied roles

Gerrit topic: https://review.openstack.org/#q,topic:bug/1513893,n,z

Addressed by: https://review.openstack.org/242853
    Create new version of assignment driver interface

Addressed by: https://review.openstack.org/247805
    Create V9 Role Driver

Gerrit topic: https://review.openstack.org/#q,topic:bp/implied-roles-patch21,n,z

Gerrit topic: https://review.openstack.org/#q,topic:bp/assignment-manager-cleanup,n,z

Addressed by: https://review.openstack.org/261841
    Correct the class name of the V9 LDAP role driver

Gerrit topic: https://review.openstack.org/#q,topic:bp/domain-specific-roles,n,z

Addressed by: https://review.openstack.org/264259
    SQL migrations for implied roles

Addressed by: https://review.openstack.org/264260
    backend for implied roles

Gerrit topic: https://review.openstack.org/#q,topic:bug/1536321,n,z

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

Nearby

This blueprint contains Public information 
Everyone can see this information.