[openstack-dev] Proposed solution to "Admin" ness improperly scoped:

Shinobu Kinjo skinjo at redhat.com
Tue Oct 13 00:07:40 UTC 2015


Just question.
Will be scopes of non-admin users projects in admin scoped project?

Shinobu

----- Original Message -----
From: "Adam Young" <ayoung at redhat.com>
To: "OpenStack Development Mailing List" <openstack-dev at lists.openstack.org>
Sent: Monday, October 12, 2015 3:38:01 AM
Subject: [openstack-dev] Proposed solution to "Admin" ness improperly scoped:

https://bugs.launchpad.net/keystone/+bug/968696/comments/39

1. Add a config value ADMIN_PROJECT_ID
2. In token creation, if ADMIN_PROJECT_ID is not None: only add the 
admin role to the token if the id of the scoped project == ADMIN_PROJECT_ID

Does this work?

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev



More information about the OpenStack-dev mailing list