Comment 4 for bug 1064914

Revision history for this message
Vish Ishaya (vishvananda) wrote : Re: Able to access ec2 resources with out a user-role

We don't check that the user is still a member of the tenant (project) so the ec2 (or s3) token still works