Explain LDAP page_size & default value

Change-Id: If7746bf92c29e824369777764877a414dc7a5d6e
Remove TODO that didn't land in grizzly

This was intended to be removed during grizzly by utilizing centralized
policy storage on /v3/policies -- but such a feature hasn't been
implemented yet beyond the API.

Change-Id: Ie696bc671fc1d6fd05cc1dda376d2be945097845
add belongs_to check

Bug 1081943

The belongs_to check was lost as part of the v3 API work.
It looks like it was broken to begin with.  Fixed

Change-Id: I4e40758fa9136b76b515100b461a36d6c31b578e
Improve tests for api protection and filtering

Fills out some more tests for both these areas.  To make it easier for
any v3 tests to do their own authentication, moved the auth builder
utility functions from test_v3_auth into test_v3.RestfulTestCase.

Also fixed an issue that meant the api filtering on a boolean
would not work.

Fixes Bug #1132080
Fixes Bug #1132372

Change-Id: I7bb7b5ba61adfc6a9c496a5547a0ca3fcfbab209
Filter out legacy_endpoint_id (bug 1152635)

Change-Id: I176c3f4fec0a1fa544efb11cffd4837dedf8cace
Merge "add belongs_to check"
Merge "Improve tests for api protection and filtering"
Switch to final 1.1.0 oslo.config release

Fixes bug #1128256

oslo.config has now been released to PyPI in time for Grizzly RC1 so
we can switch to using it directly.

Change-Id: I655f831718ae5f4e25e941ee206fe195214a9a91
Added test cases to improve LDAP project testing

Fixes Bug1154216

Change-Id: I1d29643fc71e901ace20ea11d31c66c2f2349447
Catch and log server exceptions

Fixes bug 1133041

Exceptions from the keystone WSGI server can occur and not be logged.
This means keystone will appear to silently crash, so this change
catches these exceptions and logs them so the user can determine
the cause of the crash.

Change-Id: Iecc4b8062fa4e7dbe021627613412b5dfc635432
Merge "Explain LDAP page_size & default value"
Ensure tokens are revoked for relevant v3 api calls

A number of the v3 apis were not yet revoking tokens that would
be invalidated by their actions, including:

- grant/revoke role
- delete group
- add/remove user to group

A seperate bug has been rasied with regard to revoking tokens when
a role is deleted, since this needs much more plumbing to implement.

Fixes Bug #1093493

Change-Id: Icf0792821829045d5bdecf686ec470ce54f9c9af
quiet route logging on skipped tests

Change-Id: I0ab9886d9b546a787230300d3dd2f4715241e483
Merge "Catch and log server exceptions"
Merge "Filter out legacy_endpoint_id (bug 1152635)"
Merge "Ensure tokens are revoked for relevant v3 api calls"
Merge "Switch to final 1.1.0 oslo.config release"
Migrate roles from metadata to user_project_metadata

migration 017 did not migrate existing roles from the metadata table
that was created in 001. Adding a migration (20) that compares the roles
in the metadata table (if any) and joins them to the new
user_project_metadata role that matches the user and tenant from the old
table. Also adding subsequent tests to check both of the issues above.
bug 1131087

Change-Id: I00ea6043d949c9c358827e25f05c63515fe5dea8
duplicated trust tests

the code in this file duplicates tests in
test_v3_auth

in addition, these tests are not in keeping with the
style of the v3 tests in general

Change-Id: Id904b07f54eb0aacfd299595313500ad89306f3a
Merge "Added test cases to improve LDAP project testing"