We have a change [1] under review in Swift to make access control lists compatible with migration to keystone v3 domains. The change makes two assumptions that I'd like to double-check with keystone folks: 1. That a project can never move from one domain to another. 2. That the underscore character cannot appear in a valid domain id - more specifically, that the string '_unknown' cannot be confused with a domain id. Are those safe assumptions? Thanks, Alistair [1] https://review.openstack.org/86430 -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20140701/a6d74d19/attachment.html>