<div dir="ltr">?<br><br><div class="gmail_quote">---------- Forwarded message ----------<br>From: <b class="gmail_sendername">Michael Hearn</b> <span dir="ltr"><<a href="mailto:mrhearn@gmail.com">mrhearn@gmail.com</a>></span><br>

Date: Fri, May 2, 2014 at 9:21 AM<br>Subject: [Openstack] Glance - and the use of the "project_id:%(project_id)" rule<br>To: "<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>" <<a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a>><br>

<br><br><div dir="ltr"><div>Having played with the policies and rules within glance's policy.json file I have not had any success using the rule, "project_id:%(project_id)" to restrict api usage.<br>Without changing user/role/tenant  I have had success using project_id:%(project_id)" with cinder.<br>


</div><div>I cannot find anything to suggest glance's policy engine cannot parse the rule but would like confirmation.  <br>Can anyone verify this?.<br><br></div><div>This is using icehouse, glance 0.12.0<br></div><div>


<br></div><div>~Mike <br></div><div><br></div><div><br></div></div>
<br>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to     : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br></div><br></div>