openstack team mailing list archive

[Kuo Hugo <tonytkdk@xxxxxxxxx>]

Hello folks ,

While playing with Keystone , there's four roles named
[Admin,Member,KeystoneAdmin,KeystoneServiceAdmin].
I'm confusing about that who handles these roles's permission / privileges
.... I mean RBAC include  admin, itsec, projectmanager, netadmin, developer
roles in NOVA but not Admin/Member .
is that handled by keystone or service itself ???

Is there any API to add Roles(also set permission / privileges)?

In my guess , the RBAC still on each service(nova / swift ) , but how NOVA
knows the permission of Role "Admin" ?


-- 
+Hugo Kuo+
tonytkdk@xxxxxxxxx
hugo.kuo@xxxxxxxxxxxx
+886-935-004-793

www.cloudena.com