keystone/keystone/assignment/role_backends
morgan fainberg a38d4a650f Add immutable option for roles and projects
Add in support for immutable roles and projects (including domains).
If the immutable option is set for a role or a project that
resource may not:

* Be Deleted

* Be Updated, except to change the value of "immutable" from
  `True` to `False` or `None` (None explicitly unsets the
  resource option).

* For projects (and domains), project tags cannot be created,
  updated, or deleted.

The immutable check is performed at the manager layer allowing
for exceptional code-cases to work directly with the driver.

Change-Id: I2027b1235a260b7ae5d66cbd6c369773d9e99876
Partial-bug: #1823258
2019-09-10 00:03:16 -07:00
..
__init__.py Split roles into their own backend within assignments 2015-01-14 04:36:49 +00:00
base.py Implement resource options for roles and projects 2019-09-09 22:07:30 +00:00
resource_options.py Add immutable option for roles and projects 2019-09-10 00:03:16 -07:00
sql.py Implement resource options for roles and projects 2019-09-09 22:07:30 +00:00
sql_model.py Implement resource options for roles and projects 2019-09-09 22:07:30 +00:00