keystone.assignment.backends.sql module¶

class keystone.assignment.backends.sql.Assignment[source]¶

Bases: keystone.assignment.backends.base.AssignmentDriverBase

add_role_to_user_and_project(user_id, tenant_id, role_id)[source]¶

check_grant_role_id(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)[source]¶

check_system_grant(role_id, actor_id, target_id, inherited)[source]¶

create_grant(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)[source]¶

create_system_grant(role_id, actor_id, target_id, assignment_type, inherited)[source]¶

classmethod default_role_driver()[source]¶

delete_domain_assignments(domain_id)[source]¶

delete_grant(role_id, user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)[source]¶

delete_group_assignments(group_id)[source]¶

delete_project_assignments(project_id)[source]¶

delete_role_assignments(role_id)[source]¶

delete_system_grant(role_id, actor_id, target_id, inherited)[source]¶

delete_user_assignments(user_id)[source]¶

list_grant_role_ids(user_id=None, group_id=None, domain_id=None, project_id=None, inherited_to_projects=False)[source]¶

list_role_assignments(role_id=None, user_id=None, group_ids=None, domain_id=None, project_ids=None, inherited_to_projects=None)[source]¶

list_system_grants(actor_id, target_id, assignment_type)[source]¶

list_system_grants_by_role(role_id)[source]¶

remove_role_from_user_and_project(user_id, tenant_id, role_id)[source]¶

class keystone.assignment.backends.sql.AssignmentType[source]¶

Bases: object

GROUP_DOMAIN = 'GroupDomain'¶

GROUP_PROJECT = 'GroupProject'¶

USER_DOMAIN = 'UserDomain'¶

USER_PROJECT = 'UserProject'¶

classmethod calculate_type(user_id, group_id, project_id, domain_id)[source]¶

class keystone.assignment.backends.sql.RoleAssignment(*args, **kwargs)[source]¶

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixin

actor_id¶

attributes = ['type', 'actor_id', 'target_id', 'role_id', 'inherited']¶

inherited¶

role_id¶

target_id¶

to_dict()[source]¶

Override parent method with a simpler implementation.

RoleAssignment doesn’t have non-indexed ‘extra’ attributes, so the parent implementation is not applicable.

type¶

class keystone.assignment.backends.sql.SystemRoleAssignment(*args, **kwargs)[source]¶

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixin

actor_id¶

attributes = ['type', 'actor_id', 'target_id', 'role_id', 'inherited']¶

inherited¶

role_id¶

target_id¶

to_dict()[source]¶

Override parent method with a simpler implementation.

RoleAssignment doesn’t have non-indexed ‘extra’ attributes, so the parent implementation is not applicable.

type¶