OpenStack Kilo Design Summit

The goal of this session is to find the correct OpenStack-wide way forward for providing entity-level authorization (authorization for individual secrets/containers/etc.) There has been a lot of discussion around this topic since last summit without a resolution. Keystone policy currently cannot address this use case, and there is some resistance to adding it to Barbican, since Authorization falls within Keystone's domain.