keystone.assignment.role_backends.sql module

keystone.assignment.role_backends.sql module

class keystone.assignment.role_backends.sql.ImpliedRoleTable(*args, **kwargs)[source]

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixin

attributes = ['prior_role_id', 'implied_role_id']
classmethod from_dict(dictionary)[source]

Return a model instance from a dictionary.

implied_role_id
prior_role_id
to_dict()[source]

Return a dictionary with model’s attributes.

overrides the to_dict function from the base class to avoid having an extra field.

class keystone.assignment.role_backends.sql.Role[source]

Bases: keystone.assignment.role_backends.base.RoleDriverBase

create_implied_role(**kwargs)[source]

Create a role inference rule.

Raises:keystone.exception.RoleNotFound: If the role doesn’t exist.
create_role(**kwargs)[source]

Create a new role.

Raises:keystone.exception.Conflict – If a duplicate role exists.
delete_implied_role(prior_role_id, implied_role_id)[source]

Delete a role inference rule.

Raises:keystone.exception.ImpliedRoleNotFound – If the implied role doesn’t exist.
delete_role(role_id)[source]

Delete an existing role.

Raises:keystone.exception.RoleNotFound – If the role doesn’t exist.
get_implied_role(prior_role_id, implied_role_id)[source]

Get a role inference rule.

Raises:keystone.exception.ImpliedRoleNotFound – If the implied role doesn’t exist.
get_role(role_id)[source]

Get a role by ID.

Returns:role_ref
Raises:keystone.exception.RoleNotFound – If the role doesn’t exist.
list_implied_roles(prior_role_id)[source]

List roles implied from the prior role ID.

list_role_inference_rules()[source]

List all the rules used to imply one role from another.

list_roles(hints, *args, **kwargs)[source]

List roles in the system.

Parameters:hints – filter hints which the driver should implement if at all possible.
Returns:a list of role_refs or an empty list.
list_roles_from_ids(ids)[source]

List roles for the provided list of ids.

Parameters:role_ids – list of ids
Returns:a list of role_refs.

This method is used internally by the assignment manager to bulk read a set of roles given their ids.

update_role(**kwargs)[source]

Update an existing role.

Raises:
class keystone.assignment.role_backends.sql.RoleTable(*args, **kwargs)[source]

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixinWithExtras

attributes = ['id', 'name', 'domain_id']
domain_id
extra
classmethod from_dict(role_dict)[source]
id
name
to_dict(include_extra_dict=False)[source]

Return the model’s attributes as a dictionary.

If include_extra_dict is True, ‘extra’ attributes are literally included in the resulting dictionary twice, for backwards-compatibility with a broken implementation.

Creative Commons Attribution 3.0 License

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.