keystone/keystone/token
Ronald De Rose eed233cac8 Concrete role assignments for federated users
"Shadow users: unified identity" implementation:
Allow concrete role assignments for federated users. Currently,
federated users get roles from mapped group assignments. However, with
the shadow users implementation, federated users are mapped to
identities in the backend; thus, can be assigned roles.

This patch returns locally assigned roles with the mapped group roles
for federated users; allowing for authorization for those roles.

bp shadow-users-newton

Change-Id: I9a150ded6c4b556627147d2671be15d6a3794ba5
2016-06-29 02:24:03 +00:00
..
persistence Port test_v2 unit test to Python 3 2016-05-17 00:27:17 +00:00
providers Concrete role assignments for federated users 2016-06-29 02:24:03 +00:00
__init__.py Remove exposure of routers at package level 2015-12-03 15:06:56 -03:00
_simple_cert.py Deprecate simple_cert extension 2016-02-02 15:43:02 -08:00
controllers.py Pass a request to controllers instead of a context 2016-06-08 14:56:52 +10:00
provider.py Merge "Revert to caching fernet tokens the same way we do UUID" 2016-06-08 22:01:41 +00:00
routers.py HEAD responses should return same status as GET 2014-07-08 22:37:44 -07:00
utils.py Refactor: extract and rename unique_id method 2015-03-24 14:38:49 +00:00