Creating a policy sample containing cloud_admin, project_admin and project_member roles

Registered by Andre Aranha

This blueprint has been superseded. See the newer blueprint "Modify the policy file" for updated plans.

Reading openstack policies in general, we think that the roles are quite complicated, we don't know which roles are appropriated for each user. For example, in many policies just the admin role is described. Our proposal is to clarify for the cloud user whats the role organizations, for example, cloud_admin is the role for the admins, project_admin for the project admin and project_member a member with a role in a project but with no admin permissions.
The ideia is create a policy.cloudsample.json, where was defined roles as a project_admin, cloud_admin and project_member and determine their permissions, making policies closer to the business reality.

Blueprint information

Status:
Complete
Approver:
None
Priority:
Undefined
Drafter:
Andre Aranha
Direction:
Needs approval
Assignee:
Andre Aranha
Definition:
Superseded
Series goal:
None
Implementation:
Beta Available
Milestone target:
None
Started by
Andre Aranha
Completed by
Steve Martinelli

Related branches

Sprints

Whiteboard

Tests for these policies and documentation are available here: https://github.com/andre-lsd/sample-policies-for-openstack

Gerrit topic: https://review.openstack.org/#q,topic:bp/policy-sample,n,z

Addressed by: https://review.openstack.org/123509
    Creating a policy sample

Addressed by: https://review.openstack.org/135083
        Creating a policy sample

Abandoning this blueprint prior to this new one: https://blueprints.launchpad.net/keystone/+spec/modify-policy

(?)

Work Items

This blueprint contains Public information 
Everyone can see this information.

Subscribers

No subscribers.