cloudkitty/releasenotes/notes/harden-dataframes-policy-7786286525e52dfb.yaml
Luka Peschke b3c4f18b94 Update the default policy rule for /v1/storage/dataframes
For now, this endpoint is unprotected, allowing any authenticated user to
access it. This hardens the access control.

Change-Id: Id35e162a213449527b871c01056779c29239edfa
2019-04-02 11:59:49 +02:00

7 lines
251 B
YAML

---
security:
- |
The default policy for the ``/v1/storage/dataframes`` endpoint has been
changed from ``unprotected`` (accessible by any unauthenticated used) to
``admin_or_owner`` (accessible only by admins or members of the project).