[Openstack] Listing roles for a user
Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
Hi, On Fri, May 4, 2012 at 4:36 PM, Kevin Jackson ke...@linuxservices.co.uk wrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? This should show up in the reply from the rest query after you auth, not sure about keystoneclient Chmouel. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
This actually just changed yesterday in https://github.com/openstack/python-keystoneclient/commit/e9ba370434537bcf1e53266e24397311d595b71e PRIOR to that commit: $ keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant AFTER that commit (role-list has been simplified by introducing a new command): $ keystone help user-role-list usage: keystone user-role-list [--user user-id] [--tenant_id tenant-id] List roles granted to a user Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant -Dolph On Fri, May 4, 2012 at 10:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant $ keystone tenant-list ... | bebf7c9c4d1f41d6ba6fb3ba10855b5e | demo | True| ... ubuntu@i-04b4:~$ keystone user-list ... | 906b0dc3d4464f2b88b47643f1c27297 | True| d...@example.com | demo | ... $ keystone role-list --user=906b0dc3d4464f2b88b47643f1c27297 --tenant_id=bebf7c9c4d1f41d6ba6fb3ba10855b5e ... | bbef7b9c03e84507904b352e876f28d4 | Member | | cad6d3b00ce344fbad9857a413c1f3de | anotherrole | ... The parameter --user in role-list should really be --user_id. Everett On Fri, May 4, 2012 at 9:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
Thanks all - that did the trick. Kev On 4 May 2012 18:39, Everett Toews everett.to...@cybera.ca wrote: keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant $ keystone tenant-list ... | bebf7c9c4d1f41d6ba6fb3ba10855b5e | demo | True| ... ubuntu@i-04b4:~$ keystone user-list ... | 906b0dc3d4464f2b88b47643f1c27297 | True| d...@example.com | demo | ... $ keystone role-list --user=906b0dc3d4464f2b88b47643f1c27297 --tenant_id=bebf7c9c4d1f41d6ba6fb3ba10855b5e ... | bbef7b9c03e84507904b352e876f28d4 | Member | | cad6d3b00ce344fbad9857a413c1f3de | anotherrole | ... The parameter --user in role-list should really be --user_id. Everett On Fri, May 4, 2012 at 9:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
On 05/04/2012 05:36 PM, Kevin Jackson wrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. What about keystone role-list --user userid --tenant_id tenantid ? Here, if i launch this using the SERVICE_TOKEN environment variable to be authenticated as the admin, i see an other user's role. ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
Re: [Openstack] Listing roles for a user
Hi Dolph, Just out of curiosity, why is the argument --user instead of --user-id? Seems like it would be more informative and consistent if it was --user_id. I actually wound up filing a bug for this at https://bugs.launchpad.net/keystone/+bug/994744 Everett On Fri, May 4, 2012 at 11:36 AM, Dolph Mathews dolph.math...@gmail.comwrote: This actually just changed yesterday in https://github.com/openstack/python-keystoneclient/commit/e9ba370434537bcf1e53266e24397311d595b71e PRIOR to that commit: $ keystone help role-list usage: keystone role-list [--user user-id] [--tenant_id tenant-id] List all roles, or only those granted to a user. Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant AFTER that commit (role-list has been simplified by introducing a new command): $ keystone help user-role-list usage: keystone user-role-list [--user user-id] [--tenant_id tenant-id] List roles granted to a user Optional arguments: --user user-id List roles granted to a user --tenant_id tenant-id List roles granted on a tenant -Dolph On Fri, May 4, 2012 at 10:36 AM, Kevin Jackson ke...@linuxservices.co.ukwrote: Hello everyone, Quick Q: As an administrator how can I list the roles for a given user with the keystone client? I see this teasing option - but I can only list all roles unless I auth with the user's details... role-list List all roles, or only those granted to a user. Cheers, Kev -- Kevin Jackson @itarchitectkev ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp ___ Mailing list: https://launchpad.net/~openstack Post to : openstack@lists.launchpad.net Unsubscribe : https://launchpad.net/~openstack More help : https://help.launchpad.net/ListHelp
