Sorry for my lack of explanation.
Are the both scopes of admin and non-admin totally different?
Is each project not nested in admin scope like:
admin {
Some properties
...
{
...
project-a {
owner-a
...
}
project-b {
owner-b
...
}
...
project-x {
owner-x
...
}
}
}
Or is "ADMIN_PROJECT_ID" totally different flag?
I hope you could get me -;
Shinobu
----- Original Message -----
From: "Adam Young" <ayoung at redhat.com>
To: openstack-dev at lists.openstack.org
Sent: Tuesday, October 13, 2015 12:56:54 PM
Subject: Re: [openstack-dev] Proposed solution to "Admin" ness improperly scoped:
On 10/12/2015 08:07 PM, Shinobu Kinjo wrote:
> Just question.
> Will be scopes of non-admin users projects in admin scoped project?
I'm sorry I don't understand what you are asking.
>
> Shinobu
>
> ----- Original Message -----
> From: "Adam Young" <ayoung at redhat.com>
> To: "OpenStack Development Mailing List" <openstack-dev at lists.openstack.org>
> Sent: Monday, October 12, 2015 3:38:01 AM
> Subject: [openstack-dev] Proposed solution to "Admin" ness improperly scoped:
>
> https://bugs.launchpad.net/keystone/+bug/968696/comments/39
>
> 1. Add a config value ADMIN_PROJECT_ID
> 2. In token creation, if ADMIN_PROJECT_ID is not None: only add the
> admin role to the token if the id of the scoped project == ADMIN_PROJECT_ID
>
> Does this work?
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev