senlin/releasenotes/notes/db-ignore-project_safe-for-admins-2986f15e74cd1d1c.yaml
Duc Truong be0cf7617b Ignore project_safe restriction for admin users
DB operations were previously restricted to resources belonging to the
project used for authentication. This change removes this restriction so
that admin users can access/modify resources belonging to any project.

Change-Id: I7882ebeb194137e682bdb7ab90f03587c636a7f8
2020-02-13 19:25:54 +00:00

12 lines
455 B
YAML

---
features:
- |
Admin role users can now access and modify all resources (clusters, nodes,
etc) regardless of which project that belong to.
security:
- |
Removed the restriction for admin role users that prevented access/changes
to resources (clusters, nodes, etc) belonging to projects not matching the
project used for authentication. Access for non-admin users is still
isolated to their project used for authentication.