On 2017-09-07 02:15 PM, Innus, Martins wrote: > The fix seems to be something like the attached patch and setting the > appropriate configs in keystone.conf. > > > One curious thing is that with the default keystone config, requests from all > projects have "X-Is-Admin-Project: True” > > If I set admin_project_domain_name and admin_project_name , only then do the > non admin projects have the header set to False.
apologies, do you have more details on what 'X-Is-Admin-Project' is? i'm not familiar with this header. currently, the behaviour is that: - a member of a project can only see its own events - an admin of a project can see all the events of a project (and any events without any project associated with it) if this is the way of denoting a user is a 'super-admin' that has access to all events, i'm ok with it. cheers, -- gord __________________________________________________________________________ OpenStack Development Mailing List (not for usage questions) Unsubscribe: [email protected]?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
