← Back to team overview

openstack team mailing list archive

Re: AuthZ functionality in Keystone - Re: [WAS]OpenStack Identity: Keystone API Proposal

 

On Aug 18, 2011, at 2:08 PM, Somik Behera wrote:

> 
>     2.2) Quantum needs to ensure Tenant-X( or user with access to Tenant-X) owns Virtual Network Interface named "instance-0001-eth0" available in Nova - This is where we need AuthZ help from Keystone

It seems simpler to me to have a quantum call nova with something like get_virtual_interface and pass the token.  Then nova can decide if that token has access to the vif.



Follow ups

References