Comment 1 for bug 1544328

Revision history for this message
wangxiyuan (wangxiyuan) wrote :

IMO, noauth means that anyone could do anything with zaqar. So the user could get all queues information. If so, do we really want project id here?

On the other hand, according to the wiki, I guess it hope that noauth could work the same as keystone auth except token verify. If so, we indeed need users provide project-id.

I prefer to leave the noauth as it is. And which one is better depends on the design and the use case of Zaqar. Maybe I'm wrong as well. Thought?