Open Stack

Hi all, 

I’ve set up keystone V3 policies and enabled Multidomain attribute in horizon.

When I’m logging into horizon as domain admin horizon executes domain_lookup function which 
performs 
policy.check((("identity", "identity:list_domains"),), request)

And by default keystone v3 policies enable list_domains only for cloud_admin user.
So I assume there’s a bug in either horizon or keystone V3 policies.
Or am I missing the point?


..Sergey Filatov



-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20160907/636e2e3b/attachment.html>