On Tuesday, June 23, 2015 10:30 PM, Adam Young wrote: > OK, I think I get it; you want to make a check specific to the roles > on the service token. The term Service roles confused me. > > You can do this check with oslo.messaging today. Don't uyse the role > check, just a generic check. > It looks for an elelement in a collection, and reeturns true if it is > in there; see > > > http://git.openstack.org/cgit/openstack/oslo.policy/commit/?id=a08bc > 79f5c117696c43feb2e44c4dc5fd0013deb Cool! This is what I wanted to have. :-) Thanks! Hisashi Oasnai