Re: [openstack-dev] [keystone] [nova] [oslo] [cross-project] Dynamic Policy

2015-06-03 Thread Hu, David J (Converged Cloud)
I am not a big fan of putting admins through a multi-step process. It looks like admins will need to learn unified policy file first, then 1 or 2 or more releases later, learn about policy in the db. I understand we are doing things incrementally. I would prefer that we come up with something

Re: [openstack-dev] [keystone] On dynamic policy, role hierarchies/groups/sets etc.

2015-05-06 Thread Hu, David J (Converged Cloud)
Nice summary Henry. My comments in brown. From: Adam Young [mailto:ayo...@redhat.com] Sent: Tuesday, May 5, 2015 8:35 PM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [keystone] On dynamic policy, role hierarchies/groups/sets etc. On 05/05/2015 07:05 AM, Henry Nash wrote: