barbican/releasenotes/notes/secure-rbac-secretstore-policy-ffa782850082add8.yaml
Ade Lee 060ca2ee36 Implement secure RBAC for secretstore API
Add new system scope specific RBAC rules for the secretstore API.
    The new rules allow all roles to list and get secret stores.

Change-Id: Ibb19e9854e8bafd2a454c0792503c6f4360e7cf7
2021-03-11 11:30:28 -05:00

10 lines
259 B
YAML

---
features:
- |
Implement secure-rbac for secretstores resource.
security:
- |
The current policy only allows users with the admin role to
list and get secretstore resources. The new policy allows all
users to perform these operations.