Comment 5 for bug 1581931

how would heat and tmp projects work in this context? does it follow the rbac rules based on the "parent" project? If we must whitelist each and single project to have access to a network, heat will fail right?

Im in favor of having some form of blacklisting/deny capabilities

bjolo