keystone/releasenotes/notes/bp-whitelist-extension-for-...

19 lines
1.1 KiB
YAML

---
prelude: >
[`blueprint whitelist-extension-for-app-creds <https://blueprints.launchpad.net/keystone/+spec/whitelist-extension-for-app-creds>`_]
This release adds support for delegating fine-grained privileges to
application credentials via access rules. Access rules act as a whitelist
of APIs that an application credential is allowed to use. Regular RBAC is
still enforced by oslo.policy. See the `API reference
<https://developer.openstack.org/api-ref/identity/v3/#application-credentials>`_
for details.
features:
- |
[`blueprint whitelist-extension-for-app-creds <https://blueprints.launchpad.net/keystone/+spec/whitelist-extension-for-app-creds>`_]
This release adds support for delegating fine-grained privileges to
application credentials via access rules. Access rules act as a whitelist
of APIs that an application credential is allowed to use. Regular RBAC is
still enforced by oslo.policy. See the `API reference
<https://developer.openstack.org/api-ref/identity/v3/#application-credentials>`_
for details.