<html><head><meta http-equiv="Content-Type" content="text/html charset=utf-8"></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space;" class=""><div class="">Hi all, <div class=""><br class=""></div><div class="">I’ve set up keystone V3 policies and enabled Multidomain attribute in horizon.</div><div class=""><br class=""></div><div class="">When I’m logging into horizon as domain admin horizon executes <i class="">domain_lookup </i>function which </div><div class="">performs </div><div class=""><i class="">policy.check((("identity", "identity:list_domains"),), request)</i></div><div class=""><i class=""><br class=""></i></div><div class="">And by default keystone v3 policies enable list_domains only for cloud_admin user.</div><div class="">So I assume there’s a bug in either horizon or keystone V3 policies.</div><div class="">Or am I missing the point?</div></div><div class=""><br class=""></div><br class=""><div class="">
<div class="">..Sergey Filatov</div><div class=""><br class=""></div><br class="Apple-interchange-newline">
</div>
<br class=""></body></html>