7fa424f1de
This commit introduces the system admin role to the API, making it consistent with other system-admin policy definitions. Subsequent patches will include domain support for: - domain user test coverage - project user test coverage Change-Id: Ic9a789dc3f34d9735de3b4bc4bd48b41190cbfba Closes-Bug: 1794376 Partial-Bug: 968696
33 lines
1.1 KiB
YAML
33 lines
1.1 KiB
YAML
---
|
|
features:
|
|
- |
|
|
[`bug 1794376 <https://bugs.launchpad.net/keystone/+bug/1794376>`_]
|
|
The domain API now supports the ``admin``, ``member``, and
|
|
``reader`` default roles.
|
|
upgrade:
|
|
- |
|
|
[`bug 1794376 <https://bugs.launchpad.net/keystone/+bug/1794376>`_]
|
|
The domain API uses new default policies that make it more
|
|
accessible to end users and administrators in a secure way. Please
|
|
consider these new defaults if your deployment overrides
|
|
domain policies.
|
|
deprecations:
|
|
- |
|
|
[`bug 1794376 <https://bugs.launchpad.net/keystone/+bug/1794376>`_]
|
|
The following domain policy check strings have been deprecated in
|
|
favor of more clear and concise defaults:
|
|
|
|
* ``identity:get_domain``
|
|
* ``identity:list_domains``
|
|
* ``identity:create_domain``
|
|
* ``identity:update_domain``
|
|
* ``identtity:delete_domain``
|
|
|
|
Please consider these new default if your deployment overrides
|
|
domain policies.
|
|
security:
|
|
- |
|
|
[`bug 1794376 <https://bugs.launchpad.net/keystone/+bug/1794376>`_]
|
|
The domain API now uses system-scope and default roles to
|
|
provide better accessibility to users in a secure way.
|