From 053a5f8425395efb7b2b7111120fa92c6134fc0b Mon Sep 17 00:00:00 2001
From: Steve Baker <sbaker@redhat.com>
Date: Tue, 11 Dec 2012 17:08:48 +1300
Subject: [PATCH] Add the role heat_stack_user for heat

Change-Id: I0c3ac92d222ff746baca817002821f109815fee9
---
 files/keystone_data.sh | 2 ++
 1 file changed, 2 insertions(+)

diff --git a/files/keystone_data.sh b/files/keystone_data.sh
index c8e68dd67a..a4f08e42e0 100755
--- a/files/keystone_data.sh
+++ b/files/keystone_data.sh
@@ -93,6 +93,8 @@ if [[ "$ENABLED_SERVICES" =~ "heat" ]]; then
     keystone user-role-add --tenant_id $SERVICE_TENANT \
                            --user_id $HEAT_USER \
                            --role_id $ADMIN_ROLE
+    # heat_stack_user role is for users created by Heat
+    keystone role-create --name heat_stack_user
     if [[ "$KEYSTONE_CATALOG_BACKEND" = 'sql' ]]; then
         HEAT_CFN_SERVICE=$(get_id keystone service-create \
             --name=heat-cfn \