tree e106a063732cee11d0ba27c66f988beeff59f5c9
parent 083eb7cfd6fc8952e57745e49ee68dbe63e5c50f
author Felipe Monteiro <felipe.monteiro@att.com> 1491675235 +0100
committer Felipe Monteiro <felipe.monteiro@att.com> 1491864303 +0100

Remove admin namespace throughout Patrole - Identity tests

In Tempest, it is meaningful to separate admin and non-admin
tests into different classes and files, because Tempest
must use clients with admin credentials to perform admin-only
API calls, like changing an admin password. More specifically,
Tempest must use the os_adm/os_admin-namespace clients
(instantiated with admin credentials) to perform these tests;
else 403s are thrown.

Patrole, on the other hand, doesn't need to use
os_adm/os_admin-namespace clients, because of the fact that
role-switching is performed to grant the os-namespace
clients sufficient credentials to perform API actions that
require admin credentials during setting up and cleaning up
test resources. Thus, the distinction between admin and
non-admin is not important in Patrole, as role-switching
means that at different points in time the clients have admin
and non-admin credentials.

Thus, all namespaces (files, folders and classes) that contain
"admin" should be renamed, if the non-admin version does not
already exist. If the admin version and non-admin version
tests both exist, then the admin version should be removed and
its tests merged with the non-admin version.

This patch, in addition, adds additional tests to test_rbac_roles:
some identity:check_grant tests were missing. Following tests
were added:
  1) Checking user role on domain
  2) Checking group role on project
  3) Checking group role on domain

Change-Id: Ib82e8b8a0d6c8587fb0b1ce415e751c3ebc3c2f9
Partial-Bug: #1672250