Re: [openstack-dev] [keystone] domain admin role query

2014-01-18 Thread Florent Flament
>> From: Dolph Mathews > [mailto:dolph.math...@gmail.com] > >> Sent: Wednesday, December 11, 2013 > 9:04 AM > >> To: Op

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
e. >>>> >>>> Henry >>>> On 12 Dec 2013, at 03:11, Paul Belanger >>>> wrote: >>>> >>>> > On 13-12-11 11:18 AM, Lyle, David wrote: >>>> >> +1 on moving the domain admin role rules to the default policy.json >>

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
03:11, Paul Belanger >>> wrote: >>> >>> > On 13-12-11 11:18 AM, Lyle, David wrote: >>> >> +1 on moving the domain admin role rules to the default policy.json >>> >> >>> >> -David Lyle >>> >> >>> >

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Dolph Mathews
e: >> >> +1 on moving the domain admin role rules to the default policy.json >> >> >> >> -David Lyle >> >> >> >> From: Dolph Mathews [mailto:dolph.math...@gmail.com] >> >> Sent: Wednesday, December 11, 2013 9:04 AM >> >>

Re: [openstack-dev] [keystone] domain admin role query

2013-12-18 Thread Ravi Chunduru
ailto:dolph.math...@gmail.com] > >> Sent: Wednesday, December 11, 2013 9:04 AM > >> To: OpenStack Development Mailing List (not for usage questions) > >> Subject: Re: [openstack-dev] [keystone] domain admin role query > >> > >> > >> On Tue, Dec 10, 201

Re: [openstack-dev] [keystone] domain admin role query

2013-12-12 Thread Henry Nash
OpenStack Development Mailing List (not for usage questions) >> Subject: Re: [openstack-dev] [keystone] domain admin role query >> >> >> On Tue, Dec 10, 2013 at 10:49 PM, Jamie Lennox >> wrote: >> Using the default policies it will simply check for the admin role an

Re: [openstack-dev] [keystone] domain admin role query

2013-12-12 Thread Dolph Mathews
gt;>> >>> From: Dolph Mathews [mailto:dolph.math...@gmail.com] >>> Sent: Wednesday, December 11, 2013 9:04 AM >>> To: OpenStack Development Mailing List (not for usage questions) >>> Subject: Re: [openstack-dev] [keystone] domain admin role query >>> >&g

Re: [openstack-dev] [keystone] domain admin role query

2013-12-12 Thread Adam Young
Mailing List (not for usage questions) Subject: Re: [openstack-dev] [keystone] domain admin role query On Tue, Dec 10, 2013 at 10:49 PM, Jamie Lennox wrote: Using the default policies it will simply check for the admin role and not care about the domain that admin is limited to. This is partially a

Re: [openstack-dev] [keystone] domain admin role query

2013-12-11 Thread Paul Belanger
: [openstack-dev] [keystone] domain admin role query On Tue, Dec 10, 2013 at 10:49 PM, Jamie Lennox wrote: Using the default policies it will simply check for the admin role and not care about the domain that admin is limited to. This is partially a left over from the V2 api when there wasn&#

Re: [openstack-dev] [keystone] domain admin role query

2013-12-11 Thread Adam Young
: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [keystone] domain admin role query On Tue, Dec 10, 2013 at 10:49 PM, Jamie Lennox wrote: Using the default policies it will simply check for the admin role and not care about the domain that admin is

Re: [openstack-dev] [keystone] domain admin role query

2013-12-11 Thread Lyle, David
t;OpenStack Development Mailing List" > Sent: Wednesday, 11 December, 2013 11:23:15 AM > Subject: [openstack-dev] [keystone] domain admin role query > > Hi, > I am trying out Keystone V3 APIs and domains. > I created an domain, created a project in that domain, created a

Re: [openstack-dev] [keystone] domain admin role query

2013-12-11 Thread Dolph Mathews
e > > - Original Message - > > From: "Ravi Chunduru" > > To: "OpenStack Development Mailing List" < > openstack-dev@lists.openstack.org> > > Sent: Wednesday, 11 December, 2013 11:23:15 AM > > Subject: [openstack-dev] [keystone] domain a

Re: [openstack-dev] [keystone] domain admin role query

2013-12-10 Thread Jamie Lennox
oking for to scope the admin role to a domain. Jamie - Original Message - > From: "Ravi Chunduru" > To: "OpenStack Development Mailing List" > Sent: Wednesday, 11 December, 2013 11:23:15 AM > Subject: [openstack-dev] [keystone] domain admin role query &

[openstack-dev] [keystone] domain admin role query

2013-12-10 Thread Ravi Chunduru
Hi, I am trying out Keystone V3 APIs and domains. I created an domain, created a project in that domain, created an user in that domain and project. Next, gave an admin role for that user in that domain. I am assuming that user is now admin to that domain. Now, I got a scoped token with that use