Cloned from launchpad blueprint https://blueprints.launchpad.net/keystone/+spec/role-assignments-unified-sql.

Description:

As discussed at the Icehouse summit [1], we desperately need to merge the various role assignment tables into a single table that can be queried more efficiently for the data we actually need, such as... roles!

Roles are currently persisted as JSON in a metadata column, and assignments are spread across 4 different tables (user-project, group-project, user-domain, group-domain). These four tables should be migrated to one unified table described here [2].

[1]: http://icehousedesignsummit.sched.org/event/314ae26f7fe2aca434d58f859e063ed6
[2]: https://etherpad.openstack.org/p/icehouse-assignments

Specification URL (additional information):

None