project membership to role conversion

Changes the relationship between users and projects.
There is no more direct membership in projects.  Instead,
all membership is now done via roles.
A default role has been created called _member_ with a uuid (both
configurable) that will be added in place of the group membership
for databse upgrades.

DocImpact:  https://bugs.launchpad.net/openstack-manuals/+bug/1087483

Change-Id: I2482f9ef7b838e5dade5096d6d00e81db71604d1

1 files changed, 24 insertions, 3 deletions

diff --git a/tests/default_fixtures.py b/tests/default_fixtures.py
index e20f9d7a..44fb64fb 100644
--- a/tests/default_fixtures.py
+++ b/tests/default_fixtures.py
@@ -20,6 +20,9 @@
 from keystone import config
 
 
+CONF = config.CONF
+
+
 DEFAULT_DOMAIN_ID = config.CONF.identity.default_domain_id
 
 
@@ -34,6 +37,12 @@ TENANTS = [
         'domain_id': DEFAULT_DOMAIN_ID,
         'description': 'description',
         'enabled': True,
+    }, {
+        'id': 'mtu',
+        'name': 'MTU',
+        'description': 'description',
+        'enabled': True,
+        'domain_id': DEFAULT_DOMAIN_ID
     }
 ]
 
@@ -63,14 +72,20 @@ USERS = [
         'enabled': False,
         'tenant_id': 'baz',
         'tenants': ['baz'],
+    }, {
+        'id': 'sna',
+        'name': 'SNA',
+        'domain_id': DEFAULT_DOMAIN_ID,
+        'password': 'snafu',
+        'enabled': True,
+        'tenants': ['bar']
     }
 ]
 
 METADATA = [
     {
-        'user_id': 'foo',
-        'tenant_id': 'bar',
-        'extra': 'extra',
+        'user_id': 'sna',
+        'tenant_id': 'mtu',
     }
 ]
 
@@ -81,5 +96,11 @@ ROLES = [
     }, {
         'id': 'member',
         'name': 'Member',
+    }, {
+        'id': CONF.member_role_id,
+        'name': CONF.member_role_name,
+    }, {
+        'id': 'other',
+        'name': 'Other',
     }
 ]