keystone.common.resource_options.options.immutable module

keystone.common.resource_options.options.immutable.check_immutable_delete(resource_ref, resource_type, resource_id)[source]

Check if a delete is allowed on a resource.

Parameters:

  • resource_ref – dict reference of the resource

  • resource_type – resource type (str) e.g. ‘project’

  • resource_id – id of the resource (str) e.g. project[‘id’]

Raises:

ResourceDeleteForbidden

keystone.common.resource_options.options.immutable.check_immutable_update(original_resource_ref, new_resource_ref, type, resource_id)[source]

Check if an update is allowed to an immutable resource.

Valid cases where an update is allowed:

  • Resource is not immutable

  • Resource is immutable, and update to set immutable to False or None

Parameters:

  • original_resource_ref – a dict resource reference representing the current resource

  • new_resource_ref – a dict reference of the updates to perform

  • type – the resource type, e.g. ‘project’

  • resource_id – the id of the resource (e.g. project[‘id’]), usually a UUID

Raises:

ResourceUpdateForbidden

keystone.common.resource_options.options.immutable.check_resource_immutable(resource_ref)[source]

Check to see if a resource is immutable.

Parameters:

resource_ref – a dict reference of a resource to inspect