OpenStack Identity (keystone)

  1. Bug #1840288
  2. Comment #3

Comment 3 for bug 1840288

Revision history for this message
Guang Yee (guang-yee) wrote :

I agree with Morgan, Class C1 sound appropriate. I think we should be able to craft a policy that authorize on trustee and trustor only. Merely changing the return code to 403 may not be the right fix. That's like security by obscurity.