Comment 5 for bug 884492

The v3 API is designed with users editing their own attributes in mind (such as password and default_project_id).

  https://github.com/openstack/identity-api/blob/master/openstack-identity-api/src/markdown/identity-api-v3.md

The details of authorization are left to policy.json. Implementation merged during grizzly.