<feed xmlns='http://www.w3.org/2005/Atom'>
<title>delta/openstack/python-openstackclient.git/openstackclient/identity/v3/role_assignment.py, branch 1.7.0</title>
<subtitle>opendev.org: openstack/python-openstackclient
</subtitle>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/'/>
<entry>
<title>Inherited info/option when listing role assignment</title>
<updated>2015-08-07T05:21:27+00:00</updated>
<author>
<name>Samuel de Medeiros Queiroz</name>
<email>samuel@lsd.ufcg.edu.br</email>
</author>
<published>2014-09-17T15:03:19+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/commit/?id=94a8805a9a96daa2ada2b38db1fac86e06525620'/>
<id>94a8805a9a96daa2ada2b38db1fac86e06525620</id>
<content type='text'>
Adds inherited information when listing role
assignments. In addition, it makes possible
to list only inherited ones by adding
--inherited option.

Change-Id: Idf889603d584716da95e2c7b4880142fbd8291c4
Closes-Bug: 1370546
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Adds inherited information when listing role
assignments. In addition, it makes possible
to list only inherited ones by adding
--inherited option.

Change-Id: Idf889603d584716da95e2c7b4880142fbd8291c4
Closes-Bug: 1370546
</pre>
</div>
</content>
</entry>
<entry>
<title>Add domain scoping in 'role assignment list'</title>
<updated>2015-08-01T01:56:34+00:00</updated>
<author>
<name>lin-hua-cheng</name>
<email>os.lcheng@gmail.com</email>
</author>
<published>2015-08-01T01:56:34+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/commit/?id=701b59f651fe1ec88400f014165efa6b176f375c'/>
<id>701b59f651fe1ec88400f014165efa6b176f375c</id>
<content type='text'>
Add ability to set which domain the user, group or project
belong to.

Change-Id: Idf6c7f23ab96261a73682226fb10ce5f0133924e
Closes-Bug: #1472909
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Add ability to set which domain the user, group or project
belong to.

Change-Id: Idf6c7f23ab96261a73682226fb10ce5f0133924e
Closes-Bug: #1472909
</pre>
</div>
</content>
</entry>
<entry>
<title>Role operations should not require list object permission</title>
<updated>2015-04-17T17:14:57+00:00</updated>
<author>
<name>Nathan Kinder</name>
<email>nkinder@redhat.com</email>
</author>
<published>2015-04-17T02:12:45+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/commit/?id=4c107e6f1b1913988e208b31206c84ab851b780c'/>
<id>4c107e6f1b1913988e208b31206c84ab851b780c</id>
<content type='text'>
When using Keystone's policy.v3cloudsample.json policy file, a project admin is
supposed to be able to manage role assignments.  Unfortunately, a project admin
isn't allowed to perform these operations using python-openstackclient, as we
attempt to perform list operations for any of the object types specified (users,
groups, projects). This is done in an attempt to lookup the id of the object by
name, but we perform this list operation even when the user specifies everything
by id. This causes 403 errors.

This patch still attempts to look up the object id by name, but we catch the 403
and assume that the user specified an id if the list operation is not allowed.
This is similar to what we do with the --domain option for other commands.

Closes-bug: #1445528
Change-Id: Id95a8520e935c1092d5a22ecd8ea01f572334ac8
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
When using Keystone's policy.v3cloudsample.json policy file, a project admin is
supposed to be able to manage role assignments.  Unfortunately, a project admin
isn't allowed to perform these operations using python-openstackclient, as we
attempt to perform list operations for any of the object types specified (users,
groups, projects). This is done in an attempt to lookup the id of the object by
name, but we perform this list operation even when the user specifies everything
by id. This causes 403 errors.

This patch still attempts to look up the object id by name, but we catch the 403
and assume that the user specified an id if the list operation is not allowed.
This is similar to what we do with the --domain option for other commands.

Closes-bug: #1445528
Change-Id: Id95a8520e935c1092d5a22ecd8ea01f572334ac8
</pre>
</div>
</content>
</entry>
<entry>
<title>add doc for role assignment command</title>
<updated>2014-12-24T06:23:25+00:00</updated>
<author>
<name>wanghong</name>
<email>w.wanghong@huawei.com</email>
</author>
<published>2014-12-23T03:43:02+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/commit/?id=e3ba13b32091831a7e5750d670921fce29424067'/>
<id>e3ba13b32091831a7e5750d670921fce29424067</id>
<content type='text'>
Change-Id: I594d444b6d1ec4e72bed03394178293737f26069
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
Change-Id: I594d444b6d1ec4e72bed03394178293737f26069
</pre>
</div>
</content>
</entry>
<entry>
<title>Add role assignments list support to identity v3</title>
<updated>2014-05-30T18:55:24+00:00</updated>
<author>
<name>henriquetruta</name>
<email>henrique@lsd.ufcg.edu.br</email>
</author>
<published>2014-05-28T14:09:46+00:00</published>
<link rel='alternate' type='text/html' href='http://git.baserock.org/cgit/delta/openstack/python-openstackclient.git/commit/?id=58f80e4c7544c0ee064c1629b3f128a628fc71d8'/>
<id>58f80e4c7544c0ee064c1629b3f128a628fc71d8</id>
<content type='text'>
The assignments manager and its test class were created.
Some fake stubs were also added on the fakes.py module.

The "openstack role assignment list" command was created.

Change-Id: Iae94f4fee608ea3e09ff38961ad22edc38efb89c
Implements: blueprint roles-assignment-list
Closes-Bug: 1246310
</content>
<content type='xhtml'>
<div xmlns='http://www.w3.org/1999/xhtml'>
<pre>
The assignments manager and its test class were created.
Some fake stubs were also added on the fakes.py module.

The "openstack role assignment list" command was created.

Change-Id: Iae94f4fee608ea3e09ff38961ad22edc38efb89c
Implements: blueprint roles-assignment-list
Closes-Bug: 1246310
</pre>
</div>
</content>
</entry>
</feed>
