Hi So I ave submitted two new api reviews around this: 1) Defining inherited roles - this is now done on the role def itself, as suggested by David. See: https://review.openstack.org/#/c/29781/12 2) The two un-implmented user/role apis have been replaces with a more flexible way of listing role-assignments. See:https://review.openstack.org/#/c/32394/2 I'd like to push to get this nailed asap, so we can have a shot at getting the code in! Both of these extensions are designed to give us the option to to expand this support for inheritance to all domains in the future if we chose. Henry -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130610/99b1ea37/attachment.html>