Open Stack

We don't have a test for this specific use case, but it's the type of use
case we had in mind.

I'd suggest creating a user group of users who you want to be able to
create projects, granting a specific role to that group, and then revising
keystone's policy.json to allow that role to perform
"identity:create_project".


-Dolph


On Wed, Feb 20, 2013 at 12:01 AM, Subbu Allamaraju <subbu at subbu.org> wrote:

> Hi,
>
> Looking at the V3 API Draft (
> https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md),
> I understand that roles can be granted at the project level. Does this API
> support authenticated arbitrary users to be able to create/delete and
> manage projects on their own?
>
> Our use case involves letting arbitrary users create projects, be able to
> add/remove users to their projects, and finally delete those projects. Some
> aspects of the V3 API seem relevant for this use case, but it appears that
> project creation/deletion is still an admin task.
>
> Thanks for any clarification.
>
> Subbu
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20130221/1c7a6a20/attachment.html>