keystone.trust.backends.sql module¶

class keystone.trust.backends.sql.Trust[source]¶

Bases: keystone.trust.backends.base.TrustDriverBase

consume_use(trust_id)[source]¶

Consume one use of a trust.

One use of a trust is consumed when the trust was created with a limitation on its uses, provided there are still uses available.

Raises:	keystone.exception.TrustUseLimitReached – If no remaining uses for trust. keystone.exception.TrustNotFound – If the trust doesn’t exist.

create_trust(**kwargs)[source]¶

Create a new trust.

Returns:	a new trust

delete_trust(**kwargs)[source]¶

delete_trusts_for_project(project_id)[source]¶

Delete all trusts for a project.

Parameters:	project_id – ID of a project to filter trusts by.

get_trust(trust_id, deleted=False)[source]¶

Get a trust by the trust id.

Parameters:	trust_id (string) – the trust identifier deleted (bool) – return the trust even if it is deleted, expired, or has no consumptions left

list_trusts()[source]¶

list_trusts_for_trustee(trustee_user_id)[source]¶

list_trusts_for_trustor(trustor_user_id)[source]¶

class keystone.trust.backends.sql.TrustModel(*args, **kwargs)[source]¶

Bases: sqlalchemy.ext.declarative.api.Base, keystone.common.sql.core.ModelDictMixinWithExtras

attributes = ['id', 'trustor_user_id', 'trustee_user_id', 'project_id', 'impersonation', 'expires_at', 'remaining_uses', 'deleted_at']¶

deleted_at¶

expires_at¶

expires_at_int¶

extra¶

id¶

impersonation¶

project_id¶

remaining_uses¶

trustee_user_id¶

trustor_user_id¶

class keystone.trust.backends.sql.TrustRole(*args, **kwargs)[source]¶

Bases: sqlalchemy.ext.declarative.api.Base

attributes = ['trust_id', 'role_id']¶

role_id¶

trust_id¶