keystone.assignment.V8_backends package

Submodules

keystone.assignment.V8_backends.sql module

class keystone.assignment.V8_backends.sql.Assignment

Bases: keystone.assignment.core.AssignmentDriverV8

add_role_to_user_and_project(user_id, tenant_id, role_id)

check_grant_role_id(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)

create_grant(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)

default_resource_driver()

default_role_driver()

delete_grant(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)

delete_group_assignments(group_id)

delete_project_assignments(project_id)

delete_role_assignments(role_id)

delete_user_assignments(user_id)

list_domain_ids_for_groups(group_ids, inherited=False)

list_domain_ids_for_user(user_id, group_ids, hints, inherited=False)

list_grant_role_ids(user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)

list_project_ids_for_groups(group_ids, hints, inherited=False)

list_project_ids_for_user(user_id, group_ids, hints, inherited=False)

list_role_assignments(role_id=None, user_id=None, group_ids=None, domain_id=None, project_ids=None, inherited_to_projects=None)

list_role_ids_for_groups_on_domain(group_ids, domain_id)

list_role_ids_for_groups_on_project(group_ids, project_id, project_domain_id, project_parents)

list_user_ids_for_project(tenant_id)

remove_role_from_user_and_project(user_id, tenant_id, role_id)

class keystone.assignment.V8_backends.sql.AssignmentType

Bases: object

GROUP_DOMAIN = 'GroupDomain'

GROUP_PROJECT = 'GroupProject'

USER_DOMAIN = 'UserDomain'

USER_PROJECT = 'UserProject'

classmethod calculate_type(user_id, group_id, project_id, domain_id)

class keystone.assignment.V8_backends.sql.RoleAssignment(*args, **kwargs)

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.DictBase

actor_id

attributes = ['type', 'actor_id', 'target_id', 'role_id', 'inherited']

inherited

role_id

target_id

to_dict()

Override parent method with a simpler implementation.

RoleAssignment doesn’t have non-indexed ‘extra’ attributes, so the parent implementation is not applicable.

type

Module contents