OpenStack Identity (keystone)

  1. Bug #1805371
  2. Comment #3

Comment 3 for bug 1805371

Revision history for this message
Adam Young (ayoung) wrote :

This is not a correct statement:
"User2 can create a role Dom2R2 implies Dom1R1"

Since Dom2R2 and Dom1R1 are both domain specific roles, and specific to different domains, one should not be able to imply the other.

I am fairly certain I mean that line to read:
"User2 can create a role Dom2R2 implies Dom2R1"