Comment 2 for bug 1317478

Revision history for this message
Dolph Mathews (dolph) wrote :

It's not really clear to me why it's openstackclient's fault that a "domain admin" would get a 403 - a "domain admin" is a deployment/policy.json dependent concept in keystone, and it's keystone raising the 403. Can you summarize what openstackclient is doing wrong?