barbican/releasenotes/notes/secure-rbac-consumer-policy-5ff67280dc2a2c09.yaml
Ade Lee e2c8e53730 Implement secure RBAC for consumers API
Add new project scope specific RBAC rules for the consumers API.  The old
rules still apply, but eventually will be deprecated.  The new
rules do include some changes to default policy, which are documented in
the release note.

Change-Id: I89ed0113238446ee96e486af0540b6b24336a29c
2021-03-09 14:16:11 -05:00

10 lines
315 B
YAML

---
features:
- |
Implement secure-rbac for consumers resource.
security:
- |
The new secure-rbac policy allows consumers to be added and deleted by
members. This is a change from the previous policy which only allowed the
secret's creator or admins or those that had a read acl on the secret.