openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #03590
Re: AuthZ functionality in Keystone - Re: [WAS]OpenStack Identity: Keystone API Proposal
On Aug 18, 2011, at 2:08 PM, Somik Behera wrote:
>
> 2.2) Quantum needs to ensure Tenant-X( or user with access to Tenant-X) owns Virtual Network Interface named "instance-0001-eth0" available in Nova - This is where we need AuthZ help from Keystone
It seems simpler to me to have a quantum call nova with something like get_virtual_interface and pass the token. Then nova can decide if that token has access to the vif.
Follow ups
References