Hi all, 

I’ve set up keystone V3 policies and enabled Multidomain attribute in horizon.

When I’m logging into horizon as domain admin horizon executes domain_lookup 
function which 
performs 
policy.check((("identity", "identity:list_domains"),), request)

And by default keystone v3 policies enable list_domains only for cloud_admin 
user.
So I assume there’s a bug in either horizon or keystone V3 policies.
Or am I missing the point?


..Sergey Filatov



_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : [email protected]
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to