openstack team mailing list archive

["Aguiar, Glaucimar (Brazil R&D-ECL)" <glaucimar.aguiar@xxxxxx>]

Great! It will be nice to better understand user roles and permission story for Grizzly. Please share if you have more information on this.

Thanks,
Glaucimar Aguiar


From: Dolph Mathews [mailto:dolph.mathews@xxxxxxxxx]
Sent: quarta-feira, 13 de março de 2013 13:08
To: Aguiar, Glaucimar (Brazil R&D-ECL)
Cc: openstack@xxxxxxxxxxxxxxxxxxx; Brant L Knudson
Subject: Re: [Openstack] Keystone - Domain admin role policies?

That's exactly our goal, but I'm not sure that corresponding well-tested policy.json changes will land in time for Grizzly (also not sure if there would be any other supporting changes required).

Adding Brant as he specifically was investigating the same possibility in Grizzly.


-Dolph

On Tue, Mar 12, 2013 at 8:57 AM, Aguiar, Glaucimar (Brazil R&D-ECL) <glaucimar.aguiar@xxxxxx<mailto:glaucimar.aguiar@xxxxxx>> wrote:
Please note that I know one can edit policy.json to define domain-admin role permissions but with the implementation of domains, it seems that domain-admin role permissions should be defined as admin role permissions are.

Thanks in advance,
Glaucimar Aguiar



-----Original Message-----
From: openstack-bounces+glaucimar.aguiar=hp.com@xxxxxxxxxxxxxxxxxxx<mailto:hp.com@xxxxxxxxxxxxxxxxxxx> [mailto:openstack-bounces+glaucimar.aguiar<mailto:openstack-bounces%2Bglaucimar.aguiar>=hp.com@xxxxxxxxxxxxxxxxxxx<mailto:hp.com@xxxxxxxxxxxxxxxxxxx>] On Behalf Of Aguiar, Glaucimar (Brazil R&D-ECL)
Sent: terça-feira, 12 de março de 2013 10:34
To: openstack@xxxxxxxxxxxxxxxxxxx<mailto:openstack@xxxxxxxxxxxxxxxxxxx>
Subject: [Openstack] Keystone - Domain admin role policies?

Hi,

While studying keystone v3 and domains feature, I realized that current policy.json file has no domain_admin role as I was expecting. I wonder if this role will be defined in Grizzly timeframe or how do you envision domain_admin role enforcement.

Thanks in advance!
Glaucimar Aguiar




_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack@xxxxxxxxxxxxxxxxxxx<mailto:openstack@xxxxxxxxxxxxxxxxxxx>
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp

_______________________________________________
Mailing list: https://launchpad.net/~openstack
Post to     : openstack@xxxxxxxxxxxxxxxxxxx<mailto:openstack@xxxxxxxxxxxxxxxxxxx>
Unsubscribe : https://launchpad.net/~openstack
More help   : https://help.launchpad.net/ListHelp