yahoo-eng-team team mailing list archive

[Henry Nash <henryn@xxxxxxxxxxxxxxxxxx>]

So the v2 API is really a hang over from when creating a user with a
default project automatically granted you a role on that project,
leading to the concept of "user for a project". In v3 such an automatic
assignment does not occur, and in v3 we focus much more on the direct
assignments (i.e. user/group on project/domain).

In v3 we have the (much more comprehensive) GET /role_assignments API,
which allows you to list assignments filtered by various attributes, for
example:

GET /role_assignments?scope.project_id=MyProject

will list you all the assignments on a given project.  Further, if you
want to take into account group and inherited assignments, you can issue
an API like:

GET /role_assignments?scope.project_id=MyProject?effective

See the Identity v3 API for more info: https://github.com/openstack
/keystone-specs/blob/master/api/v3/identity-api-v3.rst

** Changed in: keystone
       Status: New => Won't Fix

** Changed in: keystone
       Status: Won't Fix => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1558350

Title:
  No rest api for /v3/projects/{projectId}/users

Status in OpenStack Identity (keystone):
  Invalid

Bug description:
  I want to list users in a specified project using admin token, however
  I find there is no rest api for /v3/projects/{projectId}/users, it is
  really useful. I notice there is /v2/tenants/{tenantId}/users for this
  purpose. Is there any reason that it is removed from v3? Thanks!

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1558350/+subscriptions