Just to give a quick status update on the feature that will help fix this. We do have the system-scope implementation going through review now [0]. We also have a series of patches to keystone (and some other projects) that attempt to define the scope type for each policy/operation [1].
I've been tracking parts of this fix against bug 968696.
Just to give a quick status update on the feature that will help fix this. We do have the system-scope implementation going through review now [0]. We also have a series of patches to keystone (and some other projects) that attempt to define the scope type for each policy/operation [1].
I've been tracking parts of this fix against bug 968696.
[0] https:/ /review. openstack. org/#/q/ (status: merged+ OR+status: open)+project: openstack/ keystone+ branch: master+ topic:bp/ system- scope /review. openstack. org/#/q/ (status: merged+ OR+status: open)+project: openstack/ keystone+ branch: master+ topic:add- scope-types
[1] https:/