<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:10pt"><div><span>Check the Trust token and OAuth token in Keystone ( although currently, OAuth Token support is minimal)</span></div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span><br></span></div><div style="color: rgb(0, 0, 0); font-size: 13px; font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; background-color: transparent; font-style: normal;"><span>...shohel</span></div><div class="yahoo_quoted" style="display: block;"> <br> <br> <div style="font-family: HelveticaNeue, 'Helvetica Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 10pt;"> <div style="font-family: HelveticaNeue, 'Helvetica
Neue', Helvetica, Arial, 'Lucida Grande', sans-serif; font-size: 12pt;"> <div dir="ltr"> <font size="2" face="Arial"> On Monday, March 3, 2014 7:09 PM, Lichao Yin <lichaoyin@gmail.com> wrote:<br> </font> </div> <div class="y_msg_container">Hi stackers,<br>Our group are doing research on OpenStack.<br><br>One of our scenario is like this:<br>There are two users on cloud: user A and user B.<br>User A has some resources like volumes or object storage on cloud. We<br>hope these resource could belong to some certain user, not one tenant.<br> <br>User A wants to verify user B and grant user B the access to user A's<br>resource (maybe by token, but we hope this token is not bare token and<br>could only be used by user B).<br><br>So does anyone have idea about it or about what part of Keystone should<br>we modify?<br><br>If you have any idea, I would appreciate any feedback.<br><br>Thanks,<br>Lichao
Yin<br><br><br>_______________________________________________<br>Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>Post to : <a ymailto="mailto:openstack@lists.openstack.org" href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br><br><br></div> </div> </div> </div> </div></body></html>