keystone/keystone/assignment
morgan fainberg a38d4a650f Add immutable option for roles and projects
Add in support for immutable roles and projects (including domains).
If the immutable option is set for a role or a project that
resource may not:

* Be Deleted

* Be Updated, except to change the value of "immutable" from
  `True` to `False` or `None` (None explicitly unsets the
  resource option).

* For projects (and domains), project tags cannot be created,
  updated, or deleted.

The immutable check is performed at the manager layer allowing
for exceptional code-cases to work directly with the driver.

Change-Id: I2027b1235a260b7ae5d66cbd6c369773d9e99876
Partial-bug: #1823258
2019-09-10 00:03:16 -07:00
..
backends Replace 'tenant_id' with 'project_id' 2019-02-04 16:17:52 +01:00
role_backends Add immutable option for roles and projects 2019-09-10 00:03:16 -07:00
__init__.py Convert projects API to Flask 2018-10-11 15:27:46 -07:00
core.py Add immutable option for roles and projects 2019-09-10 00:03:16 -07:00
schema.py Implement resource options for roles and projects 2019-09-09 22:07:30 +00:00