keystone.trust.backends.sql module

class keystone.trust.backends.sql.Trust

Bases: keystone.trust.backends.base.TrustDriverBase

consume_use(trust_id)

Consume one use of a trust.

One use of a trust is consumed when the trust was created with a limitation on its uses, provided there are still uses available.

Raises

• keystone.exception.TrustUseLimitReached – If no remaining uses for trust.

• keystone.exception.TrustNotFound – If the trust doesn’t exist.

create_trust(trust_id, trust, roles)

Create a new trust.

Returns

a new trust

delete_trust(trust_id)

delete_trusts_for_project(project_id)

Delete all trusts for a project.

Parameters

project_id – ID of a project to filter trusts by.

flush_expired_and_soft_deleted_trusts(project_id=None, trustor_user_id=None, trustee_user_id=None, date=None)

Flush expired and non-expired soft deleted trusts from the backend.

Parameters

• project_id – ID of a project to filter trusts by.

• trustor_user_id – ID of a trustor_user_id to filter trusts by.

• trustee_user_id – ID of a trustee_user_id to filter trusts by.

• date (datetime) – date to filter trusts by.

get_trust(trust_id, deleted=False)

Get a trust by the trust id.

Parameters

• trust_id (string) – the trust identifier

• deleted (bool) – return the trust even if it is deleted, expired, or has no consumptions left

list_trusts()

list_trusts_for_trustee(trustee_user_id)

list_trusts_for_trustor(trustor_user_id)

class keystone.trust.backends.sql.TrustModel(*args, **kwargs)

Bases: sqlalchemy.orm.decl_api.Base, keystone.common.sql.core.ModelDictMixinWithExtras

attributes = ['id', 'trustor_user_id', 'trustee_user_id', 'project_id', 'impersonation', 'expires_at', 'remaining_uses', 'deleted_at', 'redelegated_trust_id', 'redelegation_count']

deleted_at

expires_at

expires_at_int

extra

id

impersonation

project_id

redelegated_trust_id

redelegation_count

remaining_uses

trustee_user_id

trustor_user_id

class keystone.trust.backends.sql.TrustRole(*args, **kwargs)

Bases: sqlalchemy.orm.decl_api.Base

attributes = ['trust_id', 'role_id']

role_id

trust_id