Open Stack

Hello,
Is there any documentation about what is the mapping between keystone constructs and Swift constructs?

Keystone has tenants, users, roles and Swift has accounts.

Tenants map 1-1 to Swift accounts, and users within a tenant(or account) can access each others objects and containers if they are admin(role). What does a user map to in Swift though, or is it just used within Keystone, for local or say, AD users? Also, does a role map to anything within Swift? It is a bit confusing, because Swift requires admin access to create objects, is that only specific to keystone as an auth. Some clarity around this would really help.

Cheers.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20130904/8e13f1f7/attachment.html>