bug bashing policy file

gistfile1.txt

Domain Admin w/ a role on a Project
===================================================
curl -i -H "Content-Type: application/json" \
-d '
{ "auth": {
  "identity": {
       "methods": ["password"],
       "password": {
         "user": {
           "name": "peggy",
           "domain": { "id": "fa163563484c40fcafaf365e7ef45a22" },
           "password": "pass"
         }
       }
     },
     "scope": {
       "domain": {
         "id": "fa163563484c40fcafaf365e7ef45a22"
       }
     }
   }
}' \
http://192.168.85.125:5000/v3/auth/tokens ; echo


ubuntu@ubuntu:~$ curl -s -H "X-Auth-Token: a8666ad7107c4b6e959d58854680b062" http://192.168.85.125:5000/v3/projects | python -mjson.tool
{
    "error": {
        "code": 403,
        "message": "You are not authorized to perform the requested action: identity:list_projects (Disable debug mode to suppress these details.)",
        "title": "Forbidden"
    }
}
ubuntu@ubuntu:~$ curl -s -H "X-Auth-Token: a8666ad7107c4b6e959d58854680b062" http://192.168.85.125:5000/v3/users | python -mjson.tool
{
    "error": {
        "code": 403,
        "message": "You are not authorized to perform the requested action: identity:list_users (Disable debug mode to suppress these details.)",
        "title": "Forbidden"
    }
}
ubuntu@ubuntu:~$ curl -s -H "X-Auth-Token: a8666ad7107c4b6e959d58854680b062" http://192.168.85.125:5000/v3/groups | python -mjson.tool
{
    "error": {
        "code": 403,
        "message": "You are not authorized to perform the requested action: identity:list_groups (Disable debug mode to suppress these details.)",
        "title": "Forbidden"
    }
}
ubuntu@ubuntu:~$ curl -s -H "X-Auth-Token: a8666ad7107c4b6e959d58854680b062" http://192.168.85.125:5000/v3/roles | python -mjson.tool
{
    "links": {
        "next": null,
        "previous": null,
        "self": "http://192.168.85.125:5000/v3/roles"
    },
    "roles": [
        {
            "id": "5a5c87648e964f48a758494951fd6684",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/5a5c87648e964f48a758494951fd6684"
            },
            "name": "anotherrole"
        },
        {
            "id": "813f3854bae34e508c222279fdac2c52",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/813f3854bae34e508c222279fdac2c52"
            },
            "name": "ResellerAdmin"
        },
        {
            "id": "88d9e68476514ee7b74ad8970b6527e8",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/88d9e68476514ee7b74ad8970b6527e8"
            },
            "name": "Member"
        },
        {
            "id": "c5dd4e007ff740ff9ddbb0e7bff94ba1",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/c5dd4e007ff740ff9ddbb0e7bff94ba1"
            },
            "name": "service"
        },
        {
            "id": "d7f8de0f496b4de59b292a16670e6343",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/d7f8de0f496b4de59b292a16670e6343"
            },
            "name": "heat_stack_user"
        },
        {
            "id": "ed15e78a530843c2a1a8714cc40cce21",
            "links": {
                "self": "http://192.168.85.125:5000/v3/roles/ed15e78a530843c2a1a8714cc40cce21"
            },
            "name": "admin"
        }
    ]
}