Re: [Openstack-operators] User_id Based Policy Enforcement

2017-01-16 Thread Hamza Achi
Dear Jerome and Massimo, Thank you both for your responses. I thought this feature is already implemented because its blueprint states so: https://blueprints.launchpad.net/nova/+spec/user-id-based-policy-enforcement Regards, Hamza On 16 January 2017 at 08:26, Jerome Pansanel wrote: > Dear Ham

Re: [Openstack-operators] User_id Based Policy Enforcement

2017-01-15 Thread Jerome Pansanel
Dear Hamza, You may contact the primary assignee to get the status of this feature: https://specs.openstack.org/openstack/nova-specs/specs/newton/implemented/user-id-based-policy-enforcement.html Best regards, Jerome Pansanel Le 15/01/2017 à 08:44, Hamza Achi a écrit : > Hello, > > According t

Re: [Openstack-operators] User_id Based Policy Enforcement

2017-01-15 Thread Massimo Sgaravatto
Maybe this is relevant with: https://bugs.launchpad.net/nova/+bug/1539351 ? In our Mitaka installation we had to keep using v2.0 API to be able to use user_id in the policy file ... I don't know if there are better solutions ... Cheers, Massimo 2017-01-15 8:44 GMT+01:00 Hamza Achi : > Hello,

[Openstack-operators] User_id Based Policy Enforcement

2017-01-14 Thread Hamza Achi
Hello, According to this Nova-spec of Newton release [1], user_id:%(user_id)s syntax should work to constrain some operations to user_id instead of project_id. Like deleting and rebuilding VMs. But it is not working, users within the same project can delete, rebuild..the VMs of each other. i