ea5dff48ca
In Xena, cinder adds support for project personas but not system personas. This patch adds a CinderPolicyEnforceNewDefaults parameter that controls whether cinder disables its deprecated policies, which in turn enforces the project-admin, project-member, and project-reader personas. The parameter defaults to False (cinder's deprecated policies are enabled). Change-Id: Ia97fda640b6476b2eade5d202eb0192ee7d79e9b
10 lines
474 B
YAML
10 lines
474 B
YAML
---
|
|
features:
|
|
- |
|
|
A new ``CinderPolicyEnforceNewDefaults`` parameter adds the ability to
|
|
disable Cinder's deprecated authorization policies. The default value
|
|
is False, which means Cinder's deprecated policies are enabled. Setting
|
|
the parameter to True disables the deprecated policies, which causes
|
|
Cinder to enforce the project-admin, project-member, and project-reader
|
|
RBAC personas. Support for system personas is planned for a future release.
|