[Openstack] Keystone - Domain admin role policies?

Aguiar, Glaucimar (Brazil R&D-ECL) glaucimar.aguiar at hp.com
Wed Mar 13 16:41:59 UTC 2013


Great! It will be nice to better understand user roles and permission story for Grizzly. Please share if you have more information on this.

Thanks,
Glaucimar Aguiar


From: Dolph Mathews [mailto:dolph.mathews at gmail.com]
Sent: quarta-feira, 13 de março de 2013 13:08
To: Aguiar, Glaucimar (Brazil R&D-ECL)
Cc: openstack at lists.launchpad.net; Brant L Knudson
Subject: Re: [Openstack] Keystone - Domain admin role policies?

That's exactly our goal, but I'm not sure that corresponding well-tested policy.json changes will land in time for Grizzly (also not sure if there would be any other supporting changes required).

Adding Brant as he specifically was investigating the same possibility in Grizzly.


-Dolph

On Tue, Mar 12, 2013 at 8:57 AM, Aguiar, Glaucimar (Brazil R&D-ECL) <glaucimar.aguiar at hp.com<mailto:glaucimar.aguiar at hp.com>> wrote:
Please note that I know one can edit policy.json to define domain-admin role permissions but with the implementation of domains, it seems that domain-admin role permissions should be defined as admin role permissions are.

Thanks in advance,
Glaucimar Aguiar



-----Original Message-----
From: openstack-bounces+glaucimar.aguiar=hp.com at lists.launchpad.net<mailto:hp.com at lists.launchpad.net> [mailto:openstack-bounces+glaucimar.aguiar<mailto:openstack-bounces%2Bglaucimar.aguiar>=hp.com at lists.launchpad.net<mailto:hp.com at lists.launchpad.net>] On Behalf Of Aguiar, Glaucimar (Brazil R&D-ECL)
Sent: terça-feira, 12 de março de 2013 10:34
To: openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net>
Subject: [Openstack] Keystone - Domain admin role policies?

Hi,

While studying keystone v3 and domains feature, I realized that current policy.json file has no domain_admin role as I was expecting. I wonder if this role will be defined in Grizzly timeframe or how do you envision domain_admin role enforcement.

Thanks in advance!
Glaucimar Aguiar




_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net>
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack at lists.launchpad.net<mailto:openstack at lists.launchpad.net>
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130313/b4a3cf6b/attachment.html>


More information about the Openstack mailing list