Open Stack

On 10/19/2015 12:50 PM, Fox, Kevin M wrote:
> Maybe I misunderstood then. I was thinking you were proposing endpoint 
> scoped tokens. But heat calls out to other endpoints itself, so if a 
> token is scoped to heat, it can't relay it further.


Right...not proposing that.  This is specifically for operations on the 
Services themselves, or for operations that are not cleanly scoped to an 
existing project.  I *think* it just makes explicit what people have 
been doing implicitly.  Trying not to break things too badly.