Implement a policy.json and RBAC controls for invoking the Keystone API

Registered by Joseph Heck

Implement a policy.json and associated management engine in Keystone to provide RBAC to Keystone API calls instead of the current "isAdmin" selection criteria.

Blueprint information

Status:
Complete
Approver:
Joseph Heck
Priority:
Essential
Drafter:
Joseph Heck
Direction:
Approved
Assignee:
Dolph Mathews
Definition:
Approved
Series goal:
Accepted for grizzly
Implementation:
Implemented
Milestone target:
milestone icon 2013.1
Started by
Dolph Mathews
Completed by
Joseph Heck

Related branches

Sprints

Whiteboard

Gerrit topic: https://review.openstack.org/#q,topic:bp/rbac-keystone-api,n,z

Addressed by: https://review.openstack.org/9744
    /policy CRUD (bp rbac-keystone-api)

(?)

Work Items

Dependency tree

* Blueprints in grey have been implemented.

This blueprint contains Public information 
Everyone can see this information.