Re: [openstack-dev] [Keystone] Feasibility of adding global restrictions at trust creation time

2014-07-23 Thread Morgan Fainberg
On Wednesday, July 23, 2014, Russell Bryant wrote: > On 07/22/2014 11:00 PM, Nathan Kinder wrote: > > > > > > On 07/22/2014 06:55 PM, Steven Hardy wrote: > >> On Tue, Jul 22, 2014 at 05:20:44PM -0700, Nathan Kinder wrote: > >>> Hi, > >>> > >>> I've had a few discussions recently related to Keysto

Re: [openstack-dev] [Keystone] Feasibility of adding global restrictions at trust creation time

2014-07-23 Thread Russell Bryant
On 07/22/2014 11:00 PM, Nathan Kinder wrote: > > > On 07/22/2014 06:55 PM, Steven Hardy wrote: >> On Tue, Jul 22, 2014 at 05:20:44PM -0700, Nathan Kinder wrote: >>> Hi, >>> >>> I've had a few discussions recently related to Keystone trusts with >>> regards to imposing restrictions on trusts at a

Re: [openstack-dev] [Keystone] Feasibility of adding global restrictions at trust creation time

2014-07-22 Thread Nathan Kinder
On 07/22/2014 06:55 PM, Steven Hardy wrote: > On Tue, Jul 22, 2014 at 05:20:44PM -0700, Nathan Kinder wrote: >> Hi, >> >> I've had a few discussions recently related to Keystone trusts with >> regards to imposing restrictions on trusts at a deployment level. >> Currently, the creator of a trust i

Re: [openstack-dev] [Keystone] Feasibility of adding global restrictions at trust creation time

2014-07-22 Thread Steven Hardy
On Tue, Jul 22, 2014 at 05:20:44PM -0700, Nathan Kinder wrote: > Hi, > > I've had a few discussions recently related to Keystone trusts with > regards to imposing restrictions on trusts at a deployment level. > Currently, the creator of a trust is able to specify the following > restrictions on th

[openstack-dev] [Keystone] Feasibility of adding global restrictions at trust creation time

2014-07-22 Thread Nathan Kinder
Hi, I've had a few discussions recently related to Keystone trusts with regards to imposing restrictions on trusts at a deployment level. Currently, the creator of a trust is able to specify the following restrictions on the trust at creation time: - an expiration time for the trust - the num