Comment 2 for bug 1507568

> It looks that heat engine asks about VM created in heat created project not in project of user who deployed stack.

Yes, which is expected when polling from the VM using stack domain user credentials

http://hardysteven.blogspot.co.uk/2014/04/heat-auth-model-updates-part-2-stack.html

The credentials deployed inside instances have permission to access a subset of the Heat API surface, but no other services or anything in the project of the user who deployed the stack, which is by design.

So we need to handle that case in a non-failing way and not log errors when a request comes from the project associated with the stack domain users (which is known per stack).