Re: [openstack-dev] Token Constraints

2014-09-26 Thread Adam Young
On 09/25/2014 10:38 PM, Robert Collins wrote: On 26 September 2014 14:18, Adam Young wrote: There are a few Keystone features that are coming together for Kilo. ... For endpoint binding, an endpoint will have to know its own id. So the endpoint_id will be recorded in the config file. This

Re: [openstack-dev] Token Constraints

2014-09-25 Thread Robert Collins
On 26 September 2014 14:18, Adam Young wrote: > There are a few Keystone features that are coming together for Kilo. ... > For endpoint binding, an endpoint will have to know its own id. So the > endpoint_id will be recorded in the config file. This means that the > endpoint should be created i

[openstack-dev] Token Constraints

2014-09-25 Thread Adam Young
There are a few Keystone features that are coming together for Kilo. Endpoint binding of tokens is one, and I think can be handled completely in keystonemiddelware.auth_token. Another, though, is based on a few requests we've had to be able to have policy performed against a specific object o