Re: [openstack-dev] Recommended way of having a project admin

2014-05-29 Thread Ajaya Agrawal
Hi All, The reason I ask this question in openstack-dev is there is a lot of confusion going around other projects moving to keystone v3. Would it be a problem if I use keystone v3 api for authenticating and point other services to use keystone v2 with keystone v3 token? The main issue here is

[openstack-dev] Recommended way of having a project admin

2014-05-28 Thread Ajaya Agrawal
Hi All, We want to introduce a role of project admin in our cloud who can add users only in the project in which he is an admin. AFAIK RBAC policies are not supported by keystone v2 api. So I suppose we will need to use keystone v3 to support the concept of project admin. But I hear things like

Re: [openstack-dev] Recommended way of having a project admin

2014-05-28 Thread Ben Nemec
This is a development list, please ask usage questions on the users list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Thanks. -Ben On 05/28/2014 07:58 AM, Ajaya Agrawal wrote: Hi All, We want to introduce a role of project admin in our cloud who can add users only in the

Re: [openstack-dev] Recommended way of having a project admin

2014-05-28 Thread Adam Young
On 05/28/2014 07:43 PM, Ben Nemec wrote: This is a development list, please ask usage questions on the users list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack Thanks. Ordinarily I would ordinarily agree, but this is getting into stuff that devs need to discuss. -Ben On