keystone/releasenotes/notes/bug-1818845-05f8c3af5ea9abc7.yaml
Lance Bragstad 0bf2d68520 Deprecate identity:revocation_list policy for removal
This policy doesn't actually protect anything. We can safely deprecate
it for removal and simplify policy files.

Change-Id: Iff604f6d77b9b0b91e63d4f4b1572dbb18f43947
Closes-Bug: 1818845
2019-07-23 17:21:19 +00:00

10 lines
419 B
YAML

---
deprecations:
- |
[`bug 1818845 <https://bugs.launchpad.net/keystone/+bug/1818845>`_]
The ``identity:revocation_list`` policy has been deprecated for removal.
This policy didn't actually protect the revocation list API since that API
is unenforced and unprotected. It only returns an ``HTTP 410`` or ``HTTP
403`` depending on how keystone is configured. This policy can be safely
removed.