[openstack-dev] [Keystone] Domains and projects

Dolph Mathews dolph.mathews at gmail.com
Fri Apr 12 14:29:41 UTC 2013


On Fri, Apr 12, 2013 at 9:15 AM, K.W.S.Siu <K.W.S.Siu at kent.ac.uk> wrote:

> Hi,
>
> I have a question related to domains and projects. Looking at the Identity
> API I see you can create a grant for a Role on a Project , or create a
> grant for a Role on a Domain, but not create a grant for a Role on a
> Project and Domain.


Creating a pair of role grants on a "project and domain" would be a
combination of the prior to calls you mentioned.


> So I am wondering the following:
>
> 1. Can roles on projects be constrained to a particular domain?
>

I'm not sure I understand the question? A role on a project would not apply
to resources not owned by that project.


> 2. Are projects domain specific?
>

Yes, a project is owned by a single domain.


>
> Many thanks,
>
> Kristy
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130412/c90d579e/attachment.html>


More information about the OpenStack-dev mailing list