CRD for the rules that allow one role to infer another role.
When listing roles, implied roles are inferred from any explicitly
assigned roles. A config option controls whether implied roles
are expanded in the auth data associated with tokens.
The list_assignment tests helper is also modified to
allow data driven tests for implied roles, and those new tests
are also included here.
Implied roles are not supported by the LDAP drivers; if you
try and CRD implied roles with an LDAP assignment driver a
NotImplemented is returned.
Co-Authored-By: Henry Nash <henryn@linux.vnet.ibm.com>
Partially implements: blueprint implied-roles
Change-Id: I6a9c23aea4b1f348c6c8c2b9274865806d856b82
e27991e61a