[Openstack] [openstack][keystone] Creating a "project admin" rule for keystone
Craig Jellick
cjellick at godaddy.com
Fri Jun 13 18:45:10 UTC 2014
We use AD as the identity backend and MySQL as the assignment backend, but I don't see how the backends would affect what I would want to do.
Sent from my iPhone
> On Jun 13, 2014, at 11:22 AM, "gustavo panizzo <gfa>" <gfa at zumbi.com.ar> wrote:
>
>> On 06/13/2014 02:57 PM, Craig Jellick wrote:
>> Has anyone setup a "project admin" rule for keystone?
>> Let me explain what I mean by that rule to be clear:
>> it should allow a user to add and remove other users to projects to
>> */which he belongs/*. Meaning, as a project admin for project foo, I
>> should be able to add/remove users to project foo, but not to project
>> bar, because I'm not a project admin for project bar.
>
> it could be easily do if you use ldap as your backend,
>
> sorry if being Off Topic
>
>
> --
> 1AE0 322E B8F7 4717 BDEA BF1D 44BB 1BA7 9F6C 6333
More information about the Openstack
mailing list