keystone/keystone
Lance Bragstad f249c9e2b0 Allow domain users to access the limit API
This commit adds domain-scope to the scope_types for limit policies,
allowing domain users to access those APIs when enforce_scope is
enabled. This commit also introduces some tests that explicitly show
how domain users are expected to behave with the limits API. A
subsequent patch will do the same for project users.

This commit also modifies the GET /v3/limit policy to allow project
users to filter responses by project_id, which isn't entirely useful
outside of just calling the API with a project-scoped token.

Change-Id: I9b38f3fd2f83efd508b2d9a6c323bbaa7169d4cd
Related-Bug: 1805880
Partial-Bug: 1818736
2019-09-24 19:14:17 -07:00
..
api Allow domain users to access the limit API 2019-09-24 19:14:17 -07:00
application_credential Expose access rules as its own API 2019-09-14 03:14:20 -07:00
assignment Add immutable option for roles and projects 2019-09-10 00:03:16 -07:00
auth Fix oauthlib update errors 2019-09-05 11:48:41 -07:00
catalog Allow to filter endpoint groups by name 2019-07-18 08:57:50 +02:00
cmd Merge "Use raw formatting for mapping_engine help text" 2019-09-20 10:21:08 +00:00
common Allow domain users to access the limit API 2019-09-24 19:14:17 -07:00
conf Add support for previous TOTP windows 2019-08-14 13:16:59 +12:00
credential Fix PostgreSQL specifc issue with credentials encoding 2019-09-18 11:43:52 +02:00
endpoint_policy Convert policy API to flask 2018-08-31 07:14:32 +00:00
federation Federation mapping debug should show direct_maps values 2019-09-19 11:27:53 -07:00
identity Merge "Honor group_members_are_ids for user_enabled_emulation" 2019-09-20 01:50:21 +00:00
limit Drop limit columns 2019-07-05 06:59:58 +00:00
locale Imported Translations from Zanata 2018-08-09 06:06:59 +00:00
models Add access rules to token validation 2019-09-14 03:14:36 -07:00
oauth1 Revert "Blacklist bandit 1.6.0" 2019-05-14 21:09:32 +00:00
policy Convert policy API to flask 2018-08-31 07:14:32 +00:00
receipt Change __all__ list to tuple 2018-11-07 16:40:02 -06:00
resource Add immutable option for roles and projects 2019-09-10 00:03:16 -07:00
revoke Remove unused revoke_by_user_and_project 2018-09-14 04:08:01 +00:00
server Merge "Make system tokens work with domain-specific drivers" 2019-09-18 10:22:23 +00:00
tests Allow domain users to access the limit API 2019-09-24 19:14:17 -07:00
token Merge "token: consistently decode binary types" 2019-09-19 03:21:22 +00:00
trust Move redelegation fields out of extras 2019-04-12 20:27:34 -07:00
__init__.py
exception.py Expose access rules as its own API 2019-09-14 03:14:20 -07:00
i18n.py Fix translated response 2019-08-19 14:49:37 +08:00
notifications.py Revert "Blacklist bandit 1.6.0" 2019-05-14 21:09:32 +00:00
version.py Update API version for access rules 2019-09-14 03:14:45 -07:00