Comment 13 for bug 1684320

Just to give a quick status update on the feature that will help fix this. We do have the system-scope implementation going through review now [0]. We also have a series of patches to keystone (and some other projects) that attempt to define the scope type for each policy/operation [1].

I've been tracking parts of this fix against bug 968696.

[0] https://review.openstack.org/#/q/(status:merged+OR+status:open)+project:openstack/keystone+branch:master+topic:bp/system-scope
[1] https://review.openstack.org/#/q/(status:merged+OR+status:open)+project:openstack/keystone+branch:master+topic:add-scope-types