Comment 10 for bug 1023502

Revision history for this message
Lin Hua Cheng (lin-hua-cheng) wrote :

Horizon would be able to only support this for KS V3.

Keystone V3 automatically scopes the user to the default project on authentication. This has been included in the implementation of Horizon support for Keystone V3: https://blueprints.launchpad.net/horizon/+spec/login-domain-support

For Keystone V2, it requires getting the user details first to get the default tenant id from its metadata. However, the User API requires admin privilege. It would not be possible to support this in Horizon for V2 without storing an admin credential just for calling the User API. This won't be supported for V2.

Code can be reviewed in https://github.com/gabrielhurley/django_openstack_auth/pull/47