{% load i18n %}
{% blocktrans %}Due to inconsistencies in the way Nova interacts with Keystone, a user with an admin role has access to all resources in the system (volumes, snapshots, keypairs, etc.), even in the Project dashboard where they should only see a properly-scoped subset of those resources.{% endblocktrans %}
{% blocktrans %}This means that Nova allows an admin user in the Project Dashboard to successfully take actions which otherwise should not be permitted, causing irresolvable conflicts in Nova.{% endblocktrans %}
{% blocktrans %}A list of the known problems are as follows:{% endblocktrans %}
{% blocktrans %}This is only a list of the reported inconsistencies. There may be others.{% endblocktrans %}
{% blocktrans %}The recommended practice until this problem is resolved is to keep your admin users and regular users separate. Create an "admin" project that admin users have access to, and do not grant your admin users the admin role on any other projects.{% endblocktrans %}
{% blocktrans %}To follow the status of this bug, take a look at the following items on launchpad:{% endblocktrans %}
{% blocktrans %}Thank you for reading this warning and operating your cloud responsibly.{% endblocktrans %}