The second paragraph of the introduction to the authorization section references the policy enforcement middleware but seems to be unclear as to whether the provided cases are examples or firm rules. The text in question is:
"The policy enforcement middleware enables fine-grained access control to OpenStack resources. Only admin users can provision new users and have access to various management functionality. The cloud users would only be able to spin up instances, attach volumes, and perform other operational tasks."
Is this stating the actual permissions for admin and cloud users or are these examples of what can be done with the middleware.?
These should be cleaned up and perhaps a reference to the policies section should be added to help guide the reader to a more in-depth discussion of the policy behavior.
-----------------------------------
Built: 2015-04-11T11:13:52 00:00
git SHA: 08a9f4ed1903ee1a6bd9eaaacf720b81484c0e6d
URL: http://docs.openstack.org/security-guide/content/identity.html
Fix proposed to branch: master
Review: https:/