Package roles provides functionality to interact with and control roles on the API.
A role represents a personality that a user can assume when performing a specific set of operations. If a role includes a set of rights and privileges, a user assuming that role inherits those rights and privileges.
When a token is generated, the list of roles that user can assume is returned back to them. Services that are being called by that user determine how they interpret the set of roles a user has and to which operations or resources each role grants access.
It is up to individual services such as Compute or Image to assign meaning to these roles. As far as the Identity service is concerned, a role is an arbitrary name assigned by the user.
- func List(client *gophercloud.ServiceClient) pagination.Pager
- func MockAddUserRoleResponse(t *testing.T)
- func MockDeleteUserRoleResponse(t *testing.T)
- func MockListRoleResponse(t *testing.T)
- type Role
- type RolePage
- type UserRoleResult
const ( ExtPath = "OS-KSADM" RolePath = "roles" UserPath = "users" )
This section is empty.
List is the operation responsible for listing all available global roles that a user can adopt.
Role represents an API role resource.
RolePage is a single page of a user Role collection.
type UserRoleResult ¶
UserRoleResult represents the result of either an AddUserRole or a DeleteUserRole operation.
func AddUserRole ¶
AddUserRole is the operation responsible for assigning a particular role to a user. This is confined to the scope of the user's tenant - so the tenant ID is a required argument.
func DeleteUserRole ¶
func DeleteUserRole(client *gophercloud.ServiceClient, tenantID, userID, roleID string) UserRoleResult
DeleteUserRole is the operation responsible for deleting a particular role from a user. This is confined to the scope of the user's tenant - so the tenant ID is a required argument.