Comment 1 for bug 1384377

Revision history for this message
Morgan Fainberg (mdrnstm) wrote :

This sounds like a bug in the way the rules processor is working. This may not actually be a bug in keystone but a bug in the oslo policy library or a way we're invoking the enforcer.

I'm curious what happens in the case the token matches rule:admin and domain_id" in the second case.