diff options
| author | Zuul <zuul@review.opendev.org> | 2021-02-27 05:23:24 +0000 |
|---|---|---|
| committer | Gerrit Code Review <review@openstack.org> | 2021-02-27 05:23:24 +0000 |
| commit | 0acd650d081455282d6b38156cb99eaa335f3a47 (patch) | |
| tree | 8f05e4c2a6ead145ed4bee240c32768b3f22bd68 | |
| parent | 4c1c2793f27bd83bac88d93193d6b0fb2d23488f (diff) | |
| parent | 9707673b3467fd9e476eb7c4721b3d930ba74e81 (diff) | |
| download | keystone-0acd650d081455282d6b38156cb99eaa335f3a47.tar.gz | |
Merge "trivial: Update minor wording nit in RBAC persona documentation"
| -rw-r--r-- | doc/source/admin/service-api-protection.rst | 4 |
1 files changed, 2 insertions, 2 deletions
diff --git a/doc/source/admin/service-api-protection.rst b/doc/source/admin/service-api-protection.rst index dd90c7efe..47886aeb0 100644 --- a/doc/source/admin/service-api-protection.rst +++ b/doc/source/admin/service-api-protection.rst @@ -303,8 +303,8 @@ with role assignments on a specific project using the following query: Project Administrators ====================== -*Project administrators* can only view and modify data within the project in -their role assignment. They're able to view information about their projects +*Project administrators* can only view and modify data within the project they +have authorization on. They're able to view information about their projects and set tags on their projects. They're not allowed to view system or domain resources, as that would violate the tenancy of their role assignment. Since the majority of the resources in keystone's API are system and domain-specific, |