Looks like you are doing a good job diagnosing so far, Dan :) I'm sure the Keystone contributor team would be happy to help you through the contribution process if you'd like to take this on. I would check with dolphm or zns (Ziad) on IRC (Freenode.net/#openstack-devto make sure that future plans for user->role mapping align with your plans to fix this.
Looks like you are doing a good job diagnosing so far, Dan :) I'm sure the Keystone contributor team would be happy to help you through the contribution process if you'd like to take this on. I would check with dolphm or zns (Ziad) on IRC (Freenode. net/#openstack- devto make sure that future plans for user->role mapping align with your plans to fix this.
Cheers!
-jay