Bug 1042373

Summary: [RFE][keystone]: Unified SQL table for role assignments
Product: Red Hat OpenStack Reporter: RHOS Integration <rhos-integ>
Component: openstack-keystoneAssignee: RHOS Maint <rhos-maint>
Status: CLOSED CURRENTRELEASE QA Contact: Ami Jeain <ajeain>
Severity: medium Docs Contact:
Priority: medium    
Version: unspecifiedCC: aberezin, ayoung, breeler, markmc, nkinder, ukalifon, yeylon
Target Milestone: Upstream M3Keywords: FutureFeature, Triaged
Target Release: 5.0 (RHEL 7)   
Hardware: Unspecified   
OS: Unspecified   
URL: https://blueprints.launchpad.net/keystone/+spec/role-assignments-unified-sql
Whiteboard: upstream_milestone_icehouse-3 upstream_status_implemented upstream_definition_approved
Fixed In Version: openstack-keystone-2014.1-4.el7ost Doc Type: Enhancement
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2014-06-22 12:01:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On:    
Bug Blocks: 1041896    

Description RHOS Integration 2013-12-12 21:56:22 UTC
Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/role-assignments-unified-sql.

Description:

As discussed at the Icehouse summit [1], we desperately need to merge the various role assignment tables into a single table that can be queried more efficiently for the data we actually need, such as... roles!

Roles are currently persisted as JSON in a metadata column, and assignments are spread across 4 different tables (user-project, group-project, user-domain, group-domain). These four tables should be migrated to one unified table described here [2].

[1]: http://icehousedesignsummit.sched.org/event/314ae26f7fe2aca434d58f859e063ed6
[2]: https://etherpad.openstack.org/p/icehouse-assignments

Specification URL (additional information):

None