Replace Tenant-User Membership with default role
The Roles table will get a role with the name 'member' This will be immutable.
Role assignment will be done in a table called user-project-roles. It will have 3 columns: user_id, project_id, role_id
All entries in user-tenant-
group_project_
get_tenants_for user in the V2 Controller will query select distinct (project_id) from user-project-role where user_id = {user_id}
Comparable changes need to be made on the LDAP side. Tenants currently have users in the member attribute. They will no longer do that. Again, all LDAP installs will have a Member Role by default, and value of the members attribute will be moved to the RoleOccupant attribute for the default Schema
Blueprint information
- Status:
- Complete
- Approver:
- None
- Priority:
- High
- Drafter:
- Adam Young
- Direction:
- Needs approval
- Assignee:
- Adam Young
- Definition:
- Approved
- Series goal:
- Accepted for grizzly
- Implementation:
- Implemented
- Milestone target:
- 2013.1
- Started by
- Thierry Carrez
- Completed by
- Thierry Carrez
Related branches
Related bugs
Sprints
Whiteboard
the 'member' role needs a well known role_id as well, e.g. 'default', so that we can explicitly grant/revoke it when a user's default tenant changes on the v2 API.
This has to be resolved prior to the V3 API being accepted. Approving and upping priority to High
Gerrit topic: https:/
Addressed by: https:/
roles mean membership
Gerrit topic: https:/
Addressed by: https:/
roles mean membership
Work Items
Dependency tree
* Blueprints in grey have been implemented.