glance/releasenotes/notes/enable-enforce-scope-and-new-defaults-ef543183e6c2eabb.yaml
Pranali Deore 8c04d19e88 Enabled new defaults and scope checks by default
Enabling the enforce scope and new defaults by default in glance

Related blueprint secure-rbac

Change-Id: I0808dc0b1b34b527e38aa137c1dd25e1fc06409f
2023-02-16 11:11:31 +00:00

15 lines
465 B
YAML

---
upgrade:
- |
The Glance service enables the API policies (RBAC) new defaults and scope by
default. The Default value of config options ``[oslo_policy] enforce_scope``
and ``[oslo_policy] oslo_policy.enforce_new_defaults`` have been changed
to ``True``.
If you want to disable them then modify the below config options value in
``glance-api.conf`` file::
[oslo_policy]
enforce_new_defaults=False
enforce_scope=False