diff --git a/next.json b/next.json index 7d3f298d..f8688a5a 100644 --- a/next.json +++ b/next.json @@ -67,6 +67,7 @@ "volumes-v2-readonly" ], "advisory": [ + "identity-v3-list-projects", "networks-l3-router", "networks-l3-CRUD", "networks-list-api-versions", @@ -1363,6 +1364,29 @@ } } }, + "identity-v3-list-projects": { + "achievements": [ + "foundation", + "complete", + "doc", + "discover", + "future", + "atomic", + "stable", + "tools", + "clients", + "deployed" + ], + "admin": false, + "description": "List projects a user belongs to", + "project": "keystone", + "required-since": "", + "tests": { + "tempest.api.identity.v3.test_list_projects_returns_only_authorized_projects": { + "idempotent_id": "id-86128d46-e170-4644-866a-cc487f699e1d" + } + } + }, "images-v2-index": { "achievements": [ "foundation", diff --git a/working_materials/scoring.txt b/working_materials/scoring.txt index c72c1255..5dae1914 100644 --- a/working_materials/scoring.txt +++ b/working_materials/scoring.txt @@ -227,8 +227,8 @@ Identity -------- identity-v3-api-discovery: [1,0,1] [1,1,1] [1,1,0] [1,1,1] [1] [85]* identity-v3-catalog: [1,0,1] [1,1,1] [1,1,0] [1,1,1] [1] [85]* -identity-v3-list-projects: [1,0,1] [1,1,1] [1,1,0] [0,1,0] [1] [68] -identity-v3-list-groups: [1,0,1] [1,1,1] [1,1,0] [0,1,0] [1] [68] +identity-v3-list-projects: [1,1,1] [1,1,1] [1,1,0] [0,1,0] [1] [74]* +identity-v3-list-groups: [1,1,1] [1,1,1] [1,1,0] [0,1,0] [1] [74]* Notes: * identity-v3-catalog is returned when the api for @@ -240,10 +240,18 @@ Notes: suite, so not yet tested for non-admin users. Even though it scores enough to be included as advisory, we cannot do this due to lack of non-admin test case. - * identity-v3-list-projects and identity-v3-list-groups are here because - they deserve some visibility and some explicit test cases, which at the - moment they are lacking. It seems important for users to be able to - discriminate between projects and groups when running their apps. + * identity-v3-list-projects and identity-v3-list-groups didn't have usable + tests in the past, but one was added for identity-v3-list-projects last year. + Providers like Fog.io + now actually use the /v3/users/{user_id}/[projects|groups] API's: + https://git.io/vX9S6 + https://git.io/vX9SP + * identity-v3-change-password was considered here but it's applicability is + a bit hard to gauge: many systems using third-party authentication (such as + an LDAP/AD server, an external oauth system, etc) require password changes + to be done on the backend system. It probably needs further study to see + if it's really interoperable, but it seems unlikely at this point (I also + don't see it being supported by many external tools, etc). Object Store ------------ diff --git a/working_materials/tabulated_scores.csv b/working_materials/tabulated_scores.csv index fdcb9131..5d807bbd 100644 --- a/working_materials/tabulated_scores.csv +++ b/working_materials/tabulated_scores.csv @@ -62,8 +62,8 @@ volumes-v2-extend,1,0,1,1,1,1,1,1,0,1,1,0,1,77* volumes-v2-upload,1,0,1,1,1,1,1,1,0,1,1,0,1,77* identity-v3-api-discovery,1,0,1,1,1,1,1,1,0,1,1,1,1,85* identity-v3-catalog,1,0,1,1,1,1,1,1,0,1,1,1,1,85* -identity-v3-list-projects,1,0,1,1,1,1,1,1,0,0,1,0,1,68 -identity-v3-list-groups,1,0,1,1,1,1,1,1,0,0,1,0,1,68 +identity-v3-list-projects,1,1,1,1,1,1,1,1,0,0,1,0,1,74* +identity-v3-list-groups,1,1,1,1,1,1,1,1,0,0,1,0,1,74* objectstore-object-copy,1,1,1,1,1,1,1,1,1,1,1,1,1,100* objectstore-object-create,1,1,1,1,1,1,1,1,1,1,1,1,1,100* objectstore-object-delete,1,1,1,1,1,1,1,1,1,1,1,1,1,100*