New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

FC-144/assign roles for groups #6

Merged
merged 2 commits into from Sep 26, 2016

Conversation

Projects
None yet
2 participants
@vvakhlyuev-work
Contributor

vvakhlyuev-work commented Sep 26, 2016

There're certain situations where userId is not known to the tenant.
Possible use case here is federated and multi-tenant login into
openstack via keystone. This commit allows to create a Session with
Group, map the Group to a Role(s) inside the tenant's domain and
check Session' Permissions.

Resolves FC-144

vvakhlyuev-work added some commits Aug 28, 2016

FC-144 Use Groups of Roles to create Sessions
 There're certain situations where userId is not known to the tenant.
  Possible use case here is federated and multi-tenant login into
  openstack via keystone.  This commit allows to create a Session with
  Group, map the Group to a Role(s) inside the tenant's domain and
  check Session' Permissions.

  There's still more work to do:
  - REST Implementation of managers
  - Add new unit-tests
  - Update Console managers with new functionality
FC-144 Use Groups of Roles to create Sessions
* Modified GroupMgr to support SSD and DSD constraints for roles  assignment
* Added tests for new GroupMgr methods
* Updated info needed by EnMasse project (HttpIds etc.)

@asfgit asfgit merged commit 252e611 into apache:master Sep 26, 2016

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment