openstack/keystone-specs
Code Issues Proposed changes

Merge "Shadow users: work item to relax mapping requirements"

Browse Source
This commit is contained in:
Jenkins
2016-03-31 20:54:49 +00:00
committed by Gerrit Code Review
parent 7324015c41 a71e5b2518
commit 3914d345a9
1 changed files with 5 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

5
specs/keystone/newton/shadow-users-newton.rst
View File

@@ -55,6 +55,11 @@ for the originally-proposed changes and additional detail.
no longer ephemeral, we can ignore the "ephemeral" vs "local" user type and
treat all users equally.
#. **Relax the requirement for mappings to result in group memberships.** Now
that we're able to grant authorization to federated users using concrete
role assignments, we can drop the requirement for the mapping engine to
result in any authorization (via group membership) at all.
Alternatives
------------