e2c8e53730
Add new project scope specific RBAC rules for the consumers API. The old rules still apply, but eventually will be deprecated. The new rules do include some changes to default policy, which are documented in the release note. Change-Id: I89ed0113238446ee96e486af0540b6b24336a29c
10 lines
315 B
YAML
10 lines
315 B
YAML
---
|
|
features:
|
|
- |
|
|
Implement secure-rbac for consumers resource.
|
|
security:
|
|
- |
|
|
The new secure-rbac policy allows consumers to be added and deleted by
|
|
members. This is a change from the previous policy which only allowed the
|
|
secret's creator or admins or those that had a read acl on the secret.
|