openstack team mailing list archive
-
openstack team
-
Mailing list archive
-
Message #21845
Re: Keystone - Domain admin role policies?
That's exactly our goal, but I'm not sure that corresponding well-tested
policy.json changes will land in time for Grizzly (also not sure if there
would be any other supporting changes required).
Adding Brant as he specifically was investigating the same possibility in
Grizzly.
-Dolph
On Tue, Mar 12, 2013 at 8:57 AM, Aguiar, Glaucimar (Brazil R&D-ECL) <
glaucimar.aguiar@xxxxxx> wrote:
> Please note that I know one can edit policy.json to define domain-admin
> role permissions but with the implementation of domains, it seems that
> domain-admin role permissions should be defined as admin role permissions
> are.
>
> Thanks in advance,
> Glaucimar Aguiar
>
>
>
> -----Original Message-----
> From: openstack-bounces+glaucimar.aguiar=hp.com@xxxxxxxxxxxxxxxxxxx[mailto:
> openstack-bounces+glaucimar.aguiar=hp.com@xxxxxxxxxxxxxxxxxxx] On Behalf
> Of Aguiar, Glaucimar (Brazil R&D-ECL)
> Sent: terça-feira, 12 de março de 2013 10:34
> To: openstack@xxxxxxxxxxxxxxxxxxx
> Subject: [Openstack] Keystone - Domain admin role policies?
>
> Hi,
>
> While studying keystone v3 and domains feature, I realized that current
> policy.json file has no domain_admin role as I was expecting. I wonder if
> this role will be defined in Grizzly timeframe or how do you envision
> domain_admin role enforcement.
>
> Thanks in advance!
> Glaucimar Aguiar
>
>
>
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
> _______________________________________________
> Mailing list: https://launchpad.net/~openstack
> Post to : openstack@xxxxxxxxxxxxxxxxxxx
> Unsubscribe : https://launchpad.net/~openstack
> More help : https://help.launchpad.net/ListHelp
>
Follow ups
References