Re: [openstack-dev] [Swift][Keystone] Swift vs Keystone permission models

2017-11-22 Thread John Dickinson
On 22 Nov 2017, at 22:08, Adrian Turjak wrote: > Hello fellow openstackers, > > I'm trying to figure something out that confuses me around how Swift > handles roles from Keystone, and what the ACLs allow. > > In the Swift config you can specify roles which can manage the > containers for their

[openstack-dev] [Swift][Keystone] Swift vs Keystone permission models

2017-11-22 Thread Adrian Turjak
Hello fellow openstackers, I'm trying to figure something out that confuses me around how Swift handles roles from Keystone, and what the ACLs allow. In the Swift config you can specify roles which can manage the containers for their project ('operator_roles'), and anyone with such a role