So disregarding the talk of optimization (much smarter people than i can argue that), is what you guys need as simple as listing the roles for a user? Keystone itself provides the curl stmt below. Seems very easy to add into keystone client if this is all you need.
http://localhost:35357/v2.0/users/UserID/roleRefs (where for me UserID is f4d42fa3fb9946d084299d3e867bda41 in my devstack install for admin) returning something like below. { "roles": [ { "id": "roleId=e6b1d3ee035d4f50a7757a03535d959b&userId=f4d42fa3fb9946d084299d3e867bda41&tenantId=885883dd827d4c90a3740562d7a3630b", "roleId": "e6b1d3ee035d4f50a7757a03535d959b", "tenantId": "885883dd827d4c90a3740562d7a3630b", "userId": "f4d42fa3fb9946d084299d3e867bda41" }, { "id": "roleId=c30c5ea15e514caf81ea8dc08be69792&userId=f4d42fa3fb9946d084299d3e867bda41&tenantId=885883dd827d4c90a3740562d7a3630b", "roleId": "c30c5ea15e514caf81ea8dc08be69792", "tenantId": "885883dd827d4c90a3740562d7a3630b", "userId": "f4d42fa3fb9946d084299d3e867bda41" }, { "id": "roleId=1fd81b77f7f64b97b053986ec3004c70&userId=f4d42fa3fb9946d084299d3e867bda41&tenantId=885883dd827d4c90a3740562d7a3630b", "roleId": "1fd81b77f7f64b97b053986ec3004c70", "tenantId": "885883dd827d4c90a3740562d7a3630b", "userId": "f4d42fa3fb9946d084299d3e867bda41" }, { "id": "roleId=c30c5ea15e514caf81ea8dc08be69792&userId=f4d42fa3fb9946d084299d3e867bda41&tenantId=b8504cc7c5a24b8b80f05065a80abf36", "roleId": "c30c5ea15e514caf81ea8dc08be69792", "tenantId": "b8504cc7c5a24b8b80f05065a80abf36", "userId": "f4d42fa3fb9946d084299d3e867bda41" } ] } On Mar 8, 2012, at 7:48 PM, Jason Hedden wrote: > > > On Mar 8, 2012, at 6:12 PM, Andy Smith <andys...@gmail.com> wrote: > >> >> I came across this while trying to list the roles assigned to users, which I >> still don't know how to do via the keystone client utility. Is this even >> possible? >> >> Well, to clarify that statement a bit, roles exist on user-tenant pairs, so >> you would list the roles for a user-tenant pair. > > How? I wasn't able to find a way using the keystone client tools. > > Thanks, > Jason > _______________________________________________ > Mailing list: https://launchpad.net/~openstack > Post to : openstack@lists.launchpad.net > Unsubscribe : https://launchpad.net/~openstack > More help : https://help.launchpad.net/ListHelp _______________________________________________ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
