Comment 0 for bug 1699060

Revision history for this message
Valeriy Ponomaryov (vponomaryov) wrote :

We have common approach to set rules for each API using policy.json file.
And for the moment, it is not possible to use "domain_id" in policy rules,
only "project_id" and "user_id". It becomes very important because Keystone API v3
is used more and more.
The only service that supports rules with "domain_id" is Keystone itself.