Horizon/DomainSupport

Domain Support (Work In Progress)

Use Cases

- LDAP, AD, MySQL support

Best Practices

- Use the same policy files all around
- Create a separate domain as the default Admin domain
- Discourage use of Project Admin
- Discourage use of Mixed roles (Domain Admin + Project Member)

Definitions

Known Issues

- Mixing Domain Admin + Project Admin
- Creating Members in the Default Admin domain
- Project Admin, hide Admin Dash on purpose

Horizon Bugs

- luigi (project member, invalid Catalog Service:compute)
- list_role_assignments (pure domain admin)
- Group manange members (pure domain admin)
- Project details (pure project admin, member)
- checkboxes and actions when no actions available (member)

Next Steps

- DOA patch
- Keystone patch
- Fix Horzon Bugs
- UX/UI - project picker, set domain context changes 

Test Cases

Future

- angular goodness
- persona driven workflows
- keystone changes