Open Stack

Two points. First you meant authz not authn, which threw me.
Secondly you must surely use tenants/projects for authz as well as 
roles. And surely the CSPs make use of this attribute as well do they not?

David

On 23/01/2013 20:46, Adam Young wrote:
> On 01/23/2013 03:33 PM, David Chadwick wrote:
>>
>>
>> On 23/01/2013 20:23, Adam Young wrote:
>>> the dominant attribute for authN is named roles
>>
>> Can you please explain this to me
>
> I see the term "Attribute"  like "property" in object oriented
> programming.  It is a term about the form of the meta data.  In
> Keystone, we have "attributes".  The only attribute we use for policy
> enforcement today is role assignments, but we can expand on that in the
> future.
>
>
>
>>
>> thanks
>>
>> David
>