Swift not allow ACLs between different users in different tenants using KeyStone

I encountered some problems when i set permissions (ACLs) on Openstack Swift containers.
I installed swift-1.4.8(essex) and use keystone-2012.1 as authentication system on CentOS 6.2 .
My swift proxy-server.conf and keystone.conf are here:

     http://pastebin.com/dUnHjKSj

Then,I use the script named opensatck_essex_data.sh(http://pastebin.com/LWGVZrK0 ) to initialize keystone.

After these operations,I got the token of demo:demo andnewuser:newuser

     curl -s -H 'Content-type: application/json' \
     -d '{"auth": {"tenantName": "demo", "passwordCredentials":{"username": "demo", "password": "admin"}}}' \
     http://127.0.0.1:5000/v2.0/tokens | python -mjson.tool

     curl -s -H 'Content-type: application/json' \
     -d '{"auth": {"tenantName": "newuser", "passwordCredentials": {"username": "newuser", "password": "admin"}}}' \
     http://127.0.0.1:5000/v2.0/tokens | python -mjson.tool

     Then,enable read access to newuser:newuser

     curl -X PUT -i \
     -H "X-Auth-Token: <token of demo:demo>" \
     -H "X-Container-Read: newuser:newuser" \
    http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc

     Check the permission of the container:

     curl -k -v -H 'X-Auth-Token:<token of demo:demo>' \
     http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc

     This is the reply of the operation:

     HTTP/1.1 200 OK
     X-Container-Object-Count: 1
     X-Container-Read: newuser:newuser
     X-Container-Bytes-Used: 2735
     Accept-Ranges: bytes
     Content-Length: 24
     Content-Type: text/plain; charset=utf-8
     Date: Fri, 11 May 2012 07:30:23 GMT

     opensatck_essex_data.sh

     Now,the user newuser:newuser visit the container of demo:demo

     curl -k -v -H 'X-Auth-Token:<token of newuser:newuser>' \
     http://127.0.0.1:8080/v1/AUTH_f1723800c821453d9f22d42d1fbb334b/demodirc

     While,I got 403 error.

     In my opinion,swift acls should be support the sharing between different users in different tenants.