Hi all, I'm following up a thread we started earlier this year with proposals for fixing RBAC [0]. Just wanted to give a quick update that the specification has merged [1] and the implementation is underway [2]. I will have a few more patches up shortly to handle the token scoping bits. Adding the operator list so that they can start playing with the proposed implementation if they want to. Let me know if you have any questions, Lance [0] http://lists.openstack.org/pipermail/openstack-dev/2017-June/118047.html [1] http://specs.openstack.org/openstack/keystone-specs/specs/keystone/queens/system-scope.html [2] https://review.openstack.org/#/q/status:open+branch:master+topic:bp/system-scope -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20171201/e878cb83/attachment.sig>