Re: [openstack-dev] [Glance] Granularity of policies

2014-10-10 Thread Nikhil Komawar
[eddie.sheffi...@rackspace.com] Sent: Monday, October 06, 2014 3:35 PM To: OpenStack Dev List Subject: [openstack-dev] [Glance] Granularity of policies I encountered an interesting situation with Glance policies. Basically we have a situation where users in certain roles are not allowed to make certain

[openstack-dev] [Glance] Granularity of policies

2014-10-06 Thread Eddie Sheffield
I encountered an interesting situation with Glance policies. Basically we have a situation where users in certain roles are not allowed to make certain calls at all. In this specific case, we don't want users in those roles listing or viewing members. When listing members, these users receive a

Re: [openstack-dev] [Glance] Granularity of policies

2014-10-06 Thread Vishvananda Ishaya
On Oct 6, 2014, at 12:35 PM, Eddie Sheffield eddie.sheffi...@rackspace.com wrote: I encountered an interesting situation with Glance policies. Basically we have a situation where users in certain roles are not allowed to make certain calls at all. In this specific case, we don't want users