manila/releasenotes/notes/remove-deprecated-public-share-creation-policies-051d59249e556b44.yaml
Lance Bragstad e3e0486de9 Remove deprecated public share policies
These policies were deprecated in Stein and flagged
for removal in Train. Now that we're in the Wallaby
development cycle let's remove them.

Depends-On: I2a647fd5871ef6bb7d1ab45db893a44a560bed72
Change-Id: I6e7608be57de8987117f3f4ace018a7eb91c8bd2
Signed-off-by: Goutham Pacha Ravi <gouthampravi@gmail.com>
2021-02-23 09:38:16 -08:00

12 lines
548 B
YAML

---
upgrade:
- |
The ability to create a public share (RBAC: "share:create_public_share")
and to update a share to become publicly visible
(RBAC: "share:set_public_share") are now restricted to administator
users operating at system scope. Adjust your policy file overrides if
you would like to retain the older behavior of allowing all users to
create public shares or to update private ones to public. If you do
that, be sure that your users are aware of the security implications of
publicly accessible shares.