[
https://issues.apache.org/jira/browse/FC-144?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15523616#comment-15523616
]
ASF GitHub Bot commented on FC-144:
-----------------------------------
GitHub user vvakhlyuev-work opened a pull request:
https://github.com/apache/directory-fortress-enmasse/pull/1
Fc 144/assign roles for groups
There're certain situations where userId is not known to the tenant.
Possible use case here is federated and multi-tenant login into
openstack via keystone. This commit propagates changes from
Fortress Core project to achieve this and adds new API methods.
Resolves FC-144(https://issues.apache.org/jira/browse/FC-144)
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/vvakhlyuev-work/directory-fortress-enmasse
FC-144/assign-roles-for-groups
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/directory-fortress-enmasse/pull/1.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #1
----
commit a85704b7f5d8e88fb24529e81866416ab2ab9061
Author: Vyacheslav Vakhlyuev <[email protected]>
Date: 2016-09-08T17:18:27Z
FC-144 Use Groups of Roles to create Sessions
There're certain situations where userId is not known to the tenant.
Possible use case here is federated and multi-tenant login into
openstack via keystone. This commit propagates changes from
Fortress Core project to achieve this and adds new API methods.
commit 817842a6c27a82781d5472890d19d3d93057cc06
Author: Vyacheslav Vakhlyuev <[email protected]>
Date: 2016-09-08T17:23:16Z
FC-144 Use Groups of Roles to create Sessions
Updated tests
commit cdcc4e4d751ffd229dace34a8180b442261f6d35
Author: Vyacheslav Vakhlyuev <[email protected]>
Date: 2016-09-14T17:32:38Z
FC-144 Use Groups of Roles to create Sessions
Added GroupMgrImpl assign/deassign role methods, modified existing
methods to map to core manager's one
commit 3eb9754290ced641b9a303b356cd6031165a02cc
Author: Vyacheslav Vakhlyuev <[email protected]>
Date: 2016-09-23T14:19:30Z
FC-144 Use Groups of Roles to create Sessions
* Updated core AccessMgr method signature (renamed)
----
> Ability to assign groups to roles
> ---------------------------------
>
> Key: FC-144
> URL: https://issues.apache.org/jira/browse/FC-144
> Project: FORTRESS
> Issue Type: Improvement
> Affects Versions: 1.0.1
> Reporter: Florin Stingaciu
> Assignee: Vyacheslav Vakhlyuev
> Fix For: 1.0.2
>
>
> We are currently working on performing an integration between Openstack
> Keystone and Fortress Core. We will use Fortress as the authorization backend
> for the rest of Openstack. We have managed to map most of the current
> functionality in Openstack within the Fortress schema except for the ability
> to assign roles to a group.
> I've spoken with [~smckinney], and he determined this improvement is a
> feasible addition to Fortress's feature set. After a number of back and
> forths, we have come up with the following requirements as API additions:
> * Session createSession (Group group, boolean isTrusted);
> * void assignGroup ( Group group, Role role );
> * List<Group> roleGroups ( Role role );
> * List<Role> groupRoles ( Group group );
> * the ability to use the above session with checkAccess(Session session,
> Permission perm)
> We also discussed temporal constrains for group to role assignment. Temporal
> constrains will not be utilized as this functionality has not been defined in
> Openstack.
--
This message was sent by Atlassian JIRA
(v6.3.4#6332)
