<div dir="ltr">For those looking for a little background information on RBAC, I've included a link to the NIST RBAC model [0]. It doesn't drill down to the nitty-gritty implementation details, but it does give a good idea of RBAC standardization complete with examples.<div><br></div><div>If anyone has any additional references they've found useful for RBAC discussions, feel free to drop them here.</div><div><br></div><div><br></div><div>[0] <a href="http://csrc.nist.gov/rbac/sandhu-ferraiolo-kuhn-00.pdf">http://csrc.nist.gov/rbac/sandhu-ferraiolo-kuhn-00.pdf</a></div></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, Apr 5, 2017 at 4:45 PM, Lance Bragstad <span dir="ltr"><<a href="mailto:lbragstad@gmail.com" target="_blank">lbragstad@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div dir="ltr">We ended up cancelling today's policy meeting, but policy discussions carried on throughout the day in #openstack-keystone [0]. We have several specs up for review [1][2][3][4]. Some are nova specs and a couple are proposed to keystone. With keystone's spec proposal freeze coming up next week [5], this is our last shot to collaborate on new ideas if we want to propose any for Pike.<div><br></div><div>I'm sending out this note to ask folks interested in the policy discussions to have a look at the proposed specs. Next week's meeting will be focused on having detailed discussions about them. <br><div><br></div><div>If you just can't wait to start talking about policy until next week, come find me in #openstack-dev. Pre-discussions might help maximize our meeting next week.</div><div><br></div><div>Thanks!</div><div><br></div><div>[0] <a href="http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2017-04-05.log.html#t2017-04-05T16:24:29" target="_blank">http://eavesdrop.<wbr>openstack.org/irclogs/%<wbr>23openstack-keystone/%<wbr>23openstack-keystone.2017-04-<wbr>05.log.html#t2017-04-05T16:24:<wbr>29</a></div><div><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z m_-4979012575710490774gmail-url" style="margin:0px;padding:1px 0px">[1] <a href="https://review.openstack.org/#/c/427872/" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:0px;white-space:pre-wrap" target="_blank">https://review.openstack.<wbr>org/#/c/427872/</a></span></div><div><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px">[2] </span><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z m_-4979012575710490774gmail-url" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px"><a href="https://review.openstack.org/#/c/433037/" style="margin:0px;padding:0px;white-space:pre-wrap" target="_blank">https://review.openstack.<wbr>org/#/c/433037/</a></span></div><div><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z m_-4979012575710490774gmail-url" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px">[3] <a href="https://review.openstack.org/#/c/452198/" style="margin:0px;padding:0px;white-space:pre-wrap" target="_blank">https://review.openstack.<wbr>org/#/c/452198/</a></span><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px"> </span></div><div><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px">[4] <a href="https://review.openstack.org/#/c/453739/" target="_blank">https://review.openstack.<wbr>org/#/c/453739/</a></span></div><div><span class="m_-4979012575710490774gmail-author-a-z82zgz87zz78zhz88z4vz76zz65z12efpz66z" style="color:rgb(0,0,0);font-family:"helvetica neue",arial,sans-serif;margin:0px;padding:1px 0px">[5] <a href="https://releases.openstack.org/pike/schedule.html#p-keystone-spec-proposal-freeze" target="_blank">https://releases.<wbr>openstack.org/pike/schedule.<wbr>html#p-keystone-spec-proposal-<wbr>freeze</a></span></div></div></div>
</blockquote></div><br></div>