openstack/glance
Code Issues Proposed changes

Merge "Add release note about policy-refactor"

Browse Source
This commit is contained in:
Zuul
2021-09-01 17:05:58 +00:00
committed by Gerrit Code Review
parent e5d2c41aa7 0406cb6c41
commit afea3e05da
1 changed files with 14 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

14
releasenotes/notes/policy-refactor-xena-0cddb7f2d492cb3a.yaml Normal file
View File

@@ -0,0 +1,14 @@
---
security:
- |
The Xena release of Glance is a midpoint in the process of
refactoring how our policies are applied to API operations. The
goal of applying policy enforcement in the API will ultimately
increase the flexibility operators have over which users can do
what operations to which images, and provides a path for compliant
Secure RBAC and scoped tokens. In Xena, some policies are more
flexible than they once were, allowing for more fine-grained
assignment of responsibilities, but not all things are possible
yet. If `enforce_secure_rbac` is not enabled, most things are
still enforcing the legacy behavior of hard and fast
admin-or-owner requirements.