Comment 5 for bug 1011461
Revision history for this message
| Gabriel Hurley (gabriel-hurley) wrote Re: Admin panel missing under new project panel | #5 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
0e1f616
(Get the code!)
There are two problems here:
1. As Lin Hua said, the default tenant setting there doesn't define a role. That could be fixed relatively easily, though the way that interplays with Keystone's storage of that information would be slightly odd.
2. The other problem is that there is a bug in how Keystone handles roles when changing projects. If you have an admin role on one project and a member role on another project, if you switch from the admin project to the member project you lose the admin roleuntil you switch back to the project you're an admin on. This is due to the lack of a clear differentiation between what a project admin is and what a system admin is. These issues and more are intended to be addressed by the new policy engine work being done in the v3 keystone API.