On Fri, Apr 12, 2013 at 9:15 AM, K.W.S.Siu <K.W.S.Siu at kent.ac.uk> wrote: > Hi, > > I have a question related to domains and projects. Looking at the Identity > API I see you can create a grant for a Role on a Project , or create a > grant for a Role on a Domain, but not create a grant for a Role on a > Project and Domain. Creating a pair of role grants on a "project and domain" would be a combination of the prior to calls you mentioned. > So I am wondering the following: > > 1. Can roles on projects be constrained to a particular domain? > I'm not sure I understand the question? A role on a project would not apply to resources not owned by that project. > 2. Are projects domain specific? > Yes, a project is owned by a single domain. > > Many thanks, > > Kristy > _______________________________________________ > OpenStack-dev mailing list > OpenStack-dev at lists.openstack.org > http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev > -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130412/c90d579e/attachment.html>