diff options
| author | Adam Young <ayoung@redhat.com> | 2013-02-01 11:18:16 -0500 |
|---|---|---|
| committer | Adam Young <ayoung@redhat.com> | 2013-02-18 15:11:43 -0500 |
| commit | b20302aa3e08421295140576d0aeea2fa9e34188 (patch) | |
| tree | 50459bb43b70c4ae82cf3fc6d5228c9ba1dc4dbf /keystone/config.py | |
| parent | b1bfca2501ad11a861c9064b97b7fa06fc6d958e (diff) | |
| download | keystone-b20302aa3e08421295140576d0aeea2fa9e34188.tar.gz keystone-b20302aa3e08421295140576d0aeea2fa9e34188.tar.xz keystone-b20302aa3e08421295140576d0aeea2fa9e34188.zip | |
project membership to role conversion
Changes the relationship between users and projects.
There is no more direct membership in projects. Instead,
all membership is now done via roles.
A default role has been created called _member_ with a uuid (both
configurable) that will be added in place of the group membership
for databse upgrades.
DocImpact: https://bugs.launchpad.net/openstack-manuals/+bug/1087483
Change-Id: I2482f9ef7b838e5dade5096d6d00e81db71604d1
Diffstat (limited to 'keystone/config.py')
| -rw-r--r-- | keystone/config.py | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/keystone/config.py b/keystone/config.py index b604db43..f2d8f546 100644 --- a/keystone/config.py +++ b/keystone/config.py @@ -193,6 +193,10 @@ register_int('max_request_body_size', default=114688) register_int('max_param_size', default=64) # we allow tokens to be a bit larger to accommodate PKI register_int('max_token_size', default=8192) +register_str('member_role_id', + default='9fe2ff9ee4384b1894a90878d3e92bab') +register_str('member_role_name', default='_member_') + # identity register_str('default_domain_id', group='identity', default='default') |