Loading…
This event has ended. View the official site or create your own event → Check it out
This event has ended. Create your own
View analytic
Tuesday, October 27 • 3:40pm - 4:20pm
Cross Project workshops: Global admin

Sign up or log in to save this to your schedule and see who's attending!

When Keystone was first incubated, roles were global.  Roles were later scoped to projects, but policy files have not kept up with this,.  The Goal of the Dynammic Policy discussions has been to make policy better match the requirements of scaling delegation decisions in cloud, but have thus far been limited by the static nature of policy files.  Lets fix this.

One of the biggest problems is global Admin; a user assigned admin in any role gets admin everywhere.  We can fix parts of this in Keystone, but, again, it needs a crossproject effort to wipe out global admin.
Blueprints: keystone/dynamic-policies-delivery

Moderator: Adam Young
Etherpad: https://etherpad.openstack.org/p/mitaka-cross-project-global-admin

Tuesday October 27, 2015 3:40pm - 4:20pm
Royal room
  • format json

Attendees (60)