keystone/keystone/api
Lance Bragstad feb0d58df4 Implement system reader role for groups
This commit introduces the system reader role to the group API, making
it easier for administrators to delegate subsets of responsibilities
to the API by default. This commit also maintains the ability for
any user to be able to fetch their own group memberships, which
encapsulates a bunch of tests for what regular project users can do
with groups.

Subsequent patches will incorporate:

  - system member test coverage
  - system admin functionality
  - domain reader functionality
  - domain member test coverage
  - domain admin functionality

Change-Id: I24ff27da79bb01322e05c6d8cd37f02693fd5b9f
Related-Bug: 1805369
Related-Bug: 1808859
Related-Bug: 968696
2018-12-19 20:14:17 +00:00
..
_shared Implement auth receipts spec 2018-11-02 15:06:19 +01:00
__init__.py Convert S3 and EC2 auth to flask native dispatching 2018-10-11 15:27:46 -07:00
auth.py Make collection_key and member_key raise if unset 2018-10-12 11:18:41 -07:00
credentials.py Use request_body_json function 2018-12-10 15:48:23 +00:00
discovery.py Merge "Provide a Location on HTTP 300" 2018-11-09 23:20:30 +00:00
domains.py Clarify docstrings for domain flask refactor 2018-11-28 21:36:01 -06:00
ec2tokens.py Make collection_key and member_key raise if unset 2018-10-12 11:18:41 -07:00
endpoints.py Convert auth to flask native dispatching 2018-10-09 23:23:03 -07:00
groups.py Implement system reader role for groups 2018-12-19 20:14:17 +00:00
limits.py Convert limits and registered limits to flask dispatching 2018-08-06 12:37:49 -07:00
os_ep_filter.py Move json_home "extension" rel functions 2018-08-16 20:49:01 +00:00
os_federation.py Convert auth to flask native dispatching 2018-10-09 23:23:03 -07:00
os_inherit.py Add build_target arguement to enforcer 2018-09-28 15:50:44 -05:00
os_oauth1.py Convert auth to flask native dispatching 2018-10-09 23:23:03 -07:00
os_revoke.py Move json_home "extension" rel functions 2018-08-16 20:49:01 +00:00
os_simple_cert.py Move json_home "extension" rel functions 2018-08-16 20:49:01 +00:00
policy.py Convert policy API to flask 2018-08-31 07:14:32 +00:00
projects.py Convert projects API to Flask 2018-10-11 15:27:46 -07:00
regions.py Convert regions API to flask native dispatching 2018-08-13 20:05:57 +00:00
registered_limits.py Add hint back 2018-09-20 14:58:43 +08:00
role_assignments.py Re-Add scope.system to filters 2018-08-23 17:13:09 +00:00
role_inferences.py Convert role_inferences API to flask native dispatching 2018-08-13 20:06:35 +00:00
roles.py Merge "Add hint back" 2018-10-03 21:51:14 +00:00
s3tokens.py Convert S3 and EC2 auth to flask native dispatching 2018-10-11 15:27:46 -07:00
services.py Convert services api to flask native dispatching 2018-08-13 20:06:11 +00:00
system.py Add build_target arguement to enforcer 2018-09-28 15:50:44 -05:00
trusts.py Use request_body_json function 2018-12-10 15:48:23 +00:00
users.py Move to password validation schema 2018-11-27 14:57:44 -06:00