Replied inline.<br><br><div class="gmail_quote">On Thu, May 3, 2012 at 3:23 PM, Luis Gervaso <span dir="ltr"><<a href="mailto:luis@woorea.es" target="_blank">luis@woorea.es</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Yes, this is the real issue.<div><div><br></div><div>Since /tenants is only valid for the current user (that's X-Auth-Token dependant)</div></div></blockquote><div><br></div><div>Correct.</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div><br></div><div>How can an administrator user list all the tenants a user belongs to?</div>
<div><br></div></div></blockquote><div><br></div><div>In the current API, I'm only aware of the opposite call:</div><div><br></div><div> GET /tenants/{tenant_id}/users</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div><div></div><div>Another issue i've detected is that endpoints are always dependant on a service,</div><div>may be i'm wrong but for me:</div><div><br></div><div>/service/{service_id}/endpoints</div><div><br></div>
<div>is more appropiate than</div><div><br></div><div>/endpoints</div></div></blockquote><div><br></div><div>We had a brief discussion on this topic at the summit in the v.NEXT API talk, and Joseph Heck followed up with an email on the list regarding use cases of the service catalog: <a href="http://www.mail-archive.com/openstack@lists.launchpad.net/msg10194.html">http://www.mail-archive.com/openstack@lists.launchpad.net/msg10194.html</a></div>
<div><br></div><div>I think the direction of that discussion should answer your question :)</div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>
<br></div><div>Dolph, please correct me</div><span class="HOEnZb"><font color="#888888"><div><br></div><div>Luis</div></font></span><div><div class="h5"><div><br></div><div><br><div class="gmail_quote">On Thu, May 3, 2012 at 10:12 PM, Everett Toews <span dir="ltr"><<a href="mailto:everett.toews@cybera.ca" target="_blank">everett.toews@cybera.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">I get the same as Luis when trying GET /users/{user_id}/roles on stable/essex (using devstack). Keystone spits back an<div>
<div><br></div><div>AttributeError: 'UserController' object has no attribute 'get_user_roles'</div>
<div><br></div></div><div>message instead of a nice 501.</div><div><br></div><div>GET /tenants/{tenant_id}/users/{user_id}/roles works fine. For a bit more detail have a look at</div><div><br></div><div><a href="http://docs.openstack.org/api/openstack-identity-service/2.0/content/GET_listRolesForUserOnTenant_v2.0_tenants__tenantId__users__user_id__roles_Admin_API_Service_Developer_Operations-d1e1356.html" target="_blank">http://docs.openstack.org/api/openstack-identity-service/2.0/content/GET_listRolesForUserOnTenant_v2.0_tenants__tenantId__users__user_id__roles_Admin_API_Service_Developer_Operations-d1e1356.html</a></div>
<span><font color="#888888">
<div><br></div></font></span><div><span><font color="#888888">Everett</font></span><div><div><br><br><div class="gmail_quote">On Thu, May 3, 2012 at 9:34 AM, Dolph Mathews <span dir="ltr"><<a href="mailto:dolph.mathews@gmail.com" target="_blank">dolph.mathews@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="gmail_extra">The philosophy in essex is that it's meaningless for a user to have a role without that role being applied to a tenant, so the call that's implemented is:</div>
<div class="gmail_extra"><br>
</div><div class="gmail_extra"> GET /tenants/{tenant_id}/users/{user_id}/roles</div><div class="gmail_extra"><br></div><div class="gmail_extra">Calling this instead should get you an HTTP 501 stating "User roles not supported: tenant ID required".</div>
<div class="gmail_extra"><br></div><div class="gmail_extra"> GET /users/{user_id}/roles</div><div class="gmail_extra"><br></div><div class="gmail_extra">Also, the term "roleRefs" was deprecated late in the diablo cycle (AFAIK) in favor of "roles".</div>
<span><font color="#888888">
<div class="gmail_extra"><br></div><div class="gmail_extra">-Dolph</div></font></span><div class="gmail_extra"><br><div class="gmail_quote"><div><div>On Wed, May 2, 2012 at 3:44 PM, Luis Gervaso <span dir="ltr"><<a href="mailto:luis@woorea.es" target="_blank">luis@woorea.es</a>></span> wrote:<br>
</div></div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div><div>Hi,<div><div><br></div><div>In Diablo was:</div><div><br></div><div><span style="line-height:16px;color:rgb(221,17,68);font-size:12px;white-space:pre-wrap;font-family:'Bitstream Vera Sans Mono',Courier,monospace">GET /users/{user_id}/roleRefs</span><br clear="all">
<div><br></div><div>In Essex it is maintained for compatibility reasons. I understand that this is the obsolete now.</div><div><br></div><div>I can find:</div><div><br></div><div><span style="line-height:16px;color:rgb(221,17,68);font-size:12px;white-space:pre-wrap;font-family:'Bitstream Vera Sans Mono',Courier,monospace">PUT & DELETE /users/{user_id}/roles/OS-KSADM/{role_id}</span></div>
<div><br></div><div>How can get all the roles having a user_id?</div><div><br></div><div>GET /users/{user_id}/roles (i can't find this on stable/essex)</div><div><br></div><div>Returning role list with tenant associated</div>
<div><br></div><div>Another option that would work for me is:</div><div><br></div><div>GET /users/{user_id}/tenants</div><div><br></div><div>Returning tenant list with role list associated per tenant</div><div><br></div>
<div>
<br></div><div>When i GET /user/{user_id} i obtain only this info</div><div><br></div><div><div>{"user": {"name": "admin", "enabled": true, "email": "<a href="mailto:admin@example.com" target="_blank">admin@example.com</a>", "id": "ef1e63df85b641d7bf3c575bb8670cef", "tenantId": null}}<br clear="all">
<div><br></div><div>Regards</div><span><font color="#888888"><div><br></div>-- <br>-------------------------------------------<br>Luis Alberto Gervaso Martin<div>Woorea Solutions, S.L<br>CEO & CTO<br>mobile: <a href="tel:%28%2B34%29%20627983344" value="+34627983344" target="_blank">(+34) 627983344</a><br>
<a href="mailto:luis.gervaso@gmail.com" target="_blank">luis@</a><a href="http://woorea.es/" target="_blank">woorea.es</a></div>
<br>
</font></span></div><br>
</div></div></div>
<br></div></div><div>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></div></blockquote></div><br></div>
<br>_______________________________________________<br>
Mailing list: <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
Post to : <a href="mailto:openstack@lists.launchpad.net" target="_blank">openstack@lists.launchpad.net</a><br>
Unsubscribe : <a href="https://launchpad.net/~openstack" target="_blank">https://launchpad.net/~openstack</a><br>
More help : <a href="https://help.launchpad.net/ListHelp" target="_blank">https://help.launchpad.net/ListHelp</a><br>
<br></blockquote></div><br></div></div></div>
</blockquote></div><br><br clear="all"><div><br></div>-- <br>-------------------------------------------<br>Luis Alberto Gervaso Martin<div>Woorea Solutions, S.L<br>CEO & CTO<br>mobile: <a href="tel:%28%2B34%29%20627983344" value="+34627983344" target="_blank">(+34) 627983344</a><br>
<a href="mailto:luis.gervaso@gmail.com" target="_blank">luis@</a><a href="http://woorea.es/" target="_blank">woorea.es</a></div>
<br>
</div></div></div></div>
</blockquote></div><br>