barbican/releasenotes/notes/fix-story-2009664-042ef282c0dd6b6a.yaml
Douglas Mendizábal 9601593328 Fix container consumers rbac policy
This patch modifies the Consumer controller to enable the use of
ownership information in policy checks. e.g. policies that use a target
container:

   project_id:%(target.container.project_id)

Story: 2009664
Task: 43872

Depends-On: I8698fc7a9ac849b8c24adfe824ca44dd3e42b999
Change-Id: I1724152839f0f5850f8d32d40b36d1670c0ad996
2022-02-07 16:21:38 -06:00

14 lines
562 B
YAML

---
fixes:
- |
Fixed Story 2009664 - Fixed the Consumer controller to be able to use the
associated Container's ownership information in policy checks.
security:
- |
Part of the fix for Story 2009664 required renaming the policy for
Container Consumers from "consumers:get" to "container_consumers:get",
"consumers:post" to "container_consumers:post", and "consumers:delete"
to "container_consumers:delete". If you are using custom policies to
override the default policies you will need to update them to use the
new names.