[openstack-dev] [cross-project] Admin

Adam Young ayoung at redhat.com
Mon Oct 19 16:59:57 UTC 2015

On 10/19/2015 12:50 PM, Fox, Kevin M wrote:
> Maybe I misunderstood then. I was thinking you were proposing endpoint 
> scoped tokens. But heat calls out to other endpoints itself, so if a 
> token is scoped to heat, it can't relay it further.

Right...not proposing that.  This is specifically for operations on the 
Services themselves, or for operations that are not cleanly scoped to an 
existing project.  I *think* it just makes explicit what people have 
been doing implicitly.  Trying not to break things too badly.

More information about the OpenStack-dev mailing list