keystone.common.resource_options.options.immutable module¶

keystone.common.resource_options.options.immutable.check_immutable_delete(resource_ref, resource_type, resource_id)[source]¶

Check if a delete is allowed on a resource.

Parameters:	resource_ref – dict reference of the resource resource_type – resource type (str) e.g. ‘project’ resource_id – id of the resource (str) e.g. project[‘id’]
Raises:	ResourceDeleteForbidden

keystone.common.resource_options.options.immutable.check_immutable_update(original_resource_ref, new_resource_ref, type, resource_id)[source]¶

Check if an update is allowed to an immutable resource.

Valid cases where an update is allowed:

• Resource is not immutable
• Resource is immutable, and update to set immutable to False or None

Parameters:	original_resource_ref – a dict resource reference representing the current resource new_resource_ref – a dict reference of the updates to perform type – the resource type, e.g. ‘project’ resource_id – the id of the resource (e.g. project[‘id’]), usually a UUID
Raises:	ResourceUpdateForbidden

keystone.common.resource_options.options.immutable.check_resource_immutable(resource_ref)[source]¶

Check to see if a resource is immutable.

Parameters:	resource_ref – a dict reference of a resource to inspect