On 8/13/15, 11:32 AM, "Mike Perez" <thingee at gmail.com> wrote: >* Role based properties [5] (who is asking for this, and why is Glance > enforcing roles?) I can answer this one. Property protections have been available in Glance since Havana [6]. The feature was requested by deployers. In general, Glance enforces roles because when users make requests it needs a basis on which to decide whether they should be satisfied; property protections are a specific application of that principle. >[5] - https://review.openstack.org/#/c/211201/1 [6] https://blueprints.launchpad.net/glance/+spec/api-v2-property-protection cheers, brian