5bffac0186
Supplying a policy.json file is no longer necessary. Change-Id: I33b84c4d68e8077271447bcbdea4b7052eb01204 Depends-On: https://review.opendev.org/694386
17 lines
732 B
YAML
17 lines
732 B
YAML
---
|
|
upgrade:
|
|
- |
|
|
Operators who use property protections with the
|
|
``property_protection_rule_format`` set to ``policies`` must still
|
|
define the policy rules used for property protections in a policy
|
|
file. The content of the file may be JSON or YAML. Additionally,
|
|
we suggest that the absolute pathname of this file be set as the
|
|
value of ``policy_file`` in the ``[oslo_policy]`` section of the
|
|
``glance-api.conf`` file.
|
|
|
|
Be aware that if you define a policy rule for ``default`` or
|
|
``context_is_admin``, that policy rule will also be used by the
|
|
policies that govern permissions to perform actions using the
|
|
Images API, even if these actions are not specified in the policy
|
|
file.
|