ChangeLog¶
CHANGES¶
Update master for stable/2024.2
pre-commit: Bump versions and integrate bandit
4.4.0¶
Enable enforce_scope and enforce_new_defaults by default
reno: Update master for unmaintained/zed
Remove old excludes
Update master for stable/2024.1
reno: Update master for unmaintained/xena
reno: Update master for unmaintained/wallaby
reno: Update master for unmaintained/victoria
4.3.0¶
Use consistent commands for coverage
reno: Update master for unmaintained/yoga
Add flag to skip undefined rule check
Update python classifier in setup.cfg
coveragerc: Remove non-existent path
Fix doc build error
Update master for stable/2023.2
4.2.1¶
Imported Translations from Zanata
4.2.0¶
Revert “Moves supported python runtimes from version 3.8 to 3.10”
Moves supported python runtimes from version 3.8 to 3.10
Fix deprecated rule logic if the rule was deleted in policy directory
Update master for stable/2023.1
4.1.1¶
Fix py38 jobs by using focal rather than jammy
4.1.0¶
Imported Translations from Zanata
Add Python3 antelope unit tests
Update master for stable/zed
4.0.0¶
Fix generation of sample policy files
Drop python3.6/3.7 support in testing runtime
3.12.1¶
Only pass exclude-deprecated when True
3.12.0¶
Don’t raise InvalidScope exception when do_raise=False
Add Python3 zed unit tests
Update master for stable/yoga
make deprecated rule examples explicit
3.11.0¶
Expand set_defaults() to set other config default value
Fix formatting of release list
Update python testing classifier
3.10.1¶
Enforce scope check always when rule has scope_types set
Increase timeout of the cross-neutron-tox-py38 job
3.10.0¶
Don’t reset rules without overwriting
Rules in policy directory files can be deleted
Refactor scope enforcement in the Enforcer class
Add scope_types attribute to the BaseCheck class
3.9.0¶
Add Python3 yoga unit tests
Update master for stable/xena
Clarify enforce_new_defaults help text
Map system_scope in creds dictionary
3.8.2¶
Fix a typo in the document
Changed minversion in tox to 3.18.0
3.8.1¶
setup.cfg: Replace dashes with underscores
Replace getargspec with getfullargspec
Ussuri+ is python3 only and update python to python3
3.8.0¶
Dropping lower constraints testing
Add Python3 xena unit tests
Update master for stable/wallaby
Move flake8 as a pre-commit local target
Reinstate double deprecation test logic
3.7.0¶
trivial: Tweak docstrings
Make ‘Rule’ attributes read-only
Don’t modify ‘Rule.check’
Improving documentation about target resources
Adding tests on cache handler
Correctly handle IO errors at policy file load
Add unit tests on cache handler
Add nova/neutron project unit/functional tests job in gate
3.6.2¶
Work on copy of registered rule instead of original object
3.6.1¶
Handle deprecated rule only once
Switch to collections.abc.MutableMapping
Add debug log in pick_default_policy_file
Add documentation parameters for DeprecatedRule
tests: Unset requests-related environment variables
pre-commit: Resolve dependency conflicts
remove unicode from code
3.6.0¶
Fix oslopolicy-j2y-convertor tool for RuleDefault
Add policy file selection logic when default changing to yaml
Use py3 as the default runtime for tox
Fix grammar issues
Use TOX_CONSTRAINTS_FILE
Remove format option examples in policy generator
Fix hacking min version to 3.0.1
Remove all usage of six library
Adding pre-commit
Add Python3 wallaby unit tests
Update master for stable/victoria
3.5.0¶
[goal] Migrate testing to ubuntu focal
sample-generator: Improve YAML output
3.4.0¶
Log warning for redundant file rules
Deprecate the JSON support for policy_file
Add oslopolicy-convert-json-to-yaml tool
Bump bandit version
3.3.2¶
Fix unit tests to work with stevedore > 2.0.1
Clarify what exactly an “access file” is
3.3.1¶
Don’t deepcopy objects before mask_dict_password
Include example of literal comparison policy rule
3.3.0¶
docs: Add separate man page for each CLI tool
Add oslopolicy-validator tool
3.2.1¶
Reload files in policy_dirs on primary file change
Fix pygments style
3.2.0¶
Switch to newer openstackdocstheme and reno versions
Remove the unused coding style modules
Remove translation sections from setup.cfg
Align contributing doc with oslo’s policy
docs: Add description of ‘oslopolicy-policy-generator’
Bump default tox env from py37 to py38
Add py38 package metadata
Add release notes links to doc index
Add Python3 victoria unit tests
Update master for stable/ussuri
Mark sphinx extensions thread safe
3.1.0¶
Fix doc comments for new enforce default flag
Allow disabling the default check_str change warnings
Add new config to enforce the new defaults
Cleanup warnings
Remove the conversion according to the comment of jdennis
Bump oslo.utils to 3.40.0
3.0.3¶
Use unittest.mock instead of third party mock
Update hacking for Python3
3.0.2¶
Don’t parse cli args on the global object in sphinxpolicygen
3.0.1¶
Temporarily make namespace arg optional
3.0.0¶
remove outdated header
[ussuri][goal] Drop python 2.7 support and testing
Link to the Keystone role documentation
Make HTTP check doc heading more specific
Initialize global config object in cli tools
Move away from python setup.py test who is deprecated in pbr
tox: Trivial cleanup
Follow the new PTI for document build
2.4.1¶
Don’t use string processing to combine deprecated rules
Bump the openstackdocstheme extension to 1.20
2.4.0¶
tox: Keeping going with docs
Switch to Ussuri jobs
Modernize policy checker
Update the constraints url
Update master for stable/train
Suppress deprecation warnings in oslopolicy-list-redundant
Fix reference cycle caused by deprecated sample override
2.3.2¶
2.3.1¶
2.3.0¶
Add attribute to suppress deprecation warnings
Only alias when policy names change
Add unit tests on the sphinxext indent function
Move doc related modules to doc/requirements.txt
Add Python 3 Train unit tests
Updated from global requirements
Replace git.openstack.org URLs with opendev.org URLs
Cap Bandit below 1.6.0 and update Sphinx requirement
2.2.0¶
OpenDev Migration Patch
Dropping the py35 testing
Clarify policy_file configuration option help text
Update master for stable/stein
Corrects tox.ini snippet to point to config file
Provide more specific error when namespace is missing
Add py36 and py37 tox envs
2.1.1¶
add python 3.7 unit test job
Update hacking version
2.1.0¶
Add ability for policy-checker to read configuration
2.0.0¶
1.44.1¶
Fix sample config value when set_defaults is used
Fixes is_admin type from StrOpt to BoolOpt
Fixes file access using with statements
1.44.0¶
Use template for lower-constraints
Use oslo.config instead of argparse
Add policy-upgrade tool
1.43.1¶
Prevent sensitive target data from being logged
1.43.0¶
Change openstack-dev to openstack-discuss
1.42.0¶
Fully log RBAC enforcement data
Add domain scope support for scope types
Make upgrades more robust with policy overrides
oslopolicy-checker: iterate through rules in sorted order
Enhance test to prevent JSON parsing regression
Correct typo in docs
1.41.1¶
Fix usage of token fixture in shell tests
1.41.0¶
Add ability to pass in target data for the oslopolicy-checker
Pass in policy name as part of the oslopolicy-check check call
Unit test for CLI
1.40.1¶
Update sphinx extension logging
Add minor nits in testing documentation
Clean up .gitignore references to personal tools
Add guidelines for naming policies
1.40.0¶
Add docs for developers testing APIs
1.39.1¶
sphinxext: Start parsing ‘DocumentedRuleDefault.description’ as rST
Docs: Remove references to JSON format
add lib-forward-testing-python3 test job
Imported Translations from Zanata
add python 3.6 unit test job
Move _capture_stdout to a common place
Remove PyPI downloads
import zuul job settings from project-config
Update reno for stable/rocky
1.38.1¶
Avoid redundant policy syntax checks
1.38.0¶
Teach Enforcer.enforce to deal with context objects
Pass dictionary as creds in policy tests
Fix requirements and convert to stestr
Add blueprints and releasenotes link to README
generator: Reimplement wrapping of ‘description’
fix tox python3 overrides
1.37.0¶
Add CLI usage documentation
Clarify CLI documentation
Remove erroneous newline in sample generation
Update sphinxext to include scope_types in docs
1.36.0¶
Fix document formatting
Add examples and clarification around scope_types
Include deprecated_reason when deprecated_rule is set
Include both new and deprecated rules in generated sample
trivial: Fix file permissions
1.35.0¶
Remove stale pip-missing-reqs tox test
make the sphinxpolicygen extension handle multiple input/output files
Update documentation to include usage for new projects
Trivial: Update pypi url to new url
set default python to python3
add lower-constraints job
Updated from global requirements
Update links in README
1.34.0¶
Imported Translations from Zanata
Imported Translations from Zanata
Update reno for stable/queens
Updated from global requirements
Imported Translations from Zanata
Updated from global requirements
Render deprecated policy names when generating files
Updated from global requirements
Updated from global requirements
1.33.1¶
Only log deprecation warnings when they are overridden
1.33.0¶
Add a release note for enforce_scope
Add configuration option for enforcing scope
1.32.2¶
Fix string injection for InvalidScope
1.32.1¶
Imported Translations from Zanata
1.32.0¶
Add scope_types to RuleDefault objects
1.31.0¶
Remove -U from pip install
Avoid tox_install.sh for constraints support
add bandit to pep8 job
Updated from global requirements
Handle deprecation of inspect.getargspec
Remove setting of version/release from releasenotes
Updated from global requirements
1.30.0¶
Imported Translations from Zanata
Add functionality to deprecate policies
Pass creds as a dict in tests
1.29.0¶
Documentation and release notes for plugins
expand type documentation for Enforcer arguments
Imported Translations from Zanata
http/https check rules as stevedore extensions
External Policy hook should support SSL
1.28.1¶
Modification to add additional information in the HTTPCheck request
1.28.0¶
Updated from global requirements
rewrite HttpCheckFixture to not mock out entire HttpCheck class
1.27.0¶
Updated from global requirements
Add JSON output option to sample generator
1.26.0¶
Imported Translations from Zanata
Updated from global requirements
throw an exception when sphinxext cannot find the config file
Update reno for stable/pike
fix formatting for empty defaults
Updated from global requirements
1.25.0¶
Updated from global requirements
Update URLs in documents according to document migration
Fix parsing bug when config file is empty
1.24.1¶
import configuration guide content from openstack-manuals repo
sphinxext: Use field lists in output
sphinxext: Format definition lists correctly
switch from oslosphinx to openstackdocstheme
move existing documentation into new standard layout
1.24.0¶
Updated from global requirements
Updated from global requirements
Updated from global requirements
Updated from global requirements
Updated from global requirements
1.23.0¶
Updated from global requirements
Simplify message of exception PolicyNotAuthorized
Updated from global requirements
1.22.1¶
Updated from global requirements
Add Sphinx extension to pretty-print modules
Optimize the link address
Check reStructuredText documents for common style issues
1.22.0¶
Update usage documentation
Add release note for DocumentedRuleDefault
Remove log translations
oslopolicy-sample-generator description support
Use Sphinx 1.5 warning-is-error
1.21.0¶
Comment out the rule from generated sample-policy file
Modify tests in test_generator
Add additional param to policy.RuleDefault
Updated from global requirements
Seperate each policy rule with new line
1.20.0¶
Allow multiline descriptions for RuleDefaults
1.19.0¶
Updated from global requirements
[Fix gate]Update test requirement
Updated from global requirements
Updated from global requirements
Remove support for py34
pbr.version.VersionInfo needs package name (oslo.xyz and not oslo_xyz)
Delete the unnecessary word in policy.py
Update reno for stable/ocata
Add optional exception for check_rules
1.18.0¶
Remove references to Python 3.4
Remove dead code and use default value of argparse
Add Constraints support
Updated from global requirements
1.17.0¶
Improved performance of parse_file_contents() method
Show team and repo badges on README
Remove wrong parameter type for class NotCheck from docstring
Fix a code logic while doing cyclical reference check to the policy
Updated from global requirements
Add missing parameter description in module _cache_handler
Fix typo in oslo.policy
Updated from global requirements
Add stevedore to requirements
Imported Translations from Zanata
Updated from global requirements
Make exception PolicyNotAuthorized more readable
1.16.0¶
Change assertTrue(isinstance()) by optimal assert
Perform basic checks on policy definitions
Enable release notes translation
Changed the home-page link
Change assertTrue(isinstance()) by optimal assert
1.15.0¶
Updated from global requirements
Update docs on policy sample generator
Updated from global requirements
doc: Add introduction to index page
Add sphinx extension to build sample policy
Updated from global requirements
Updated from global requirements
Doc: declare YAML/JSON support
Remove oslo.utils from requirements
Update reno for stable/newton
1.14.0¶
Revert “Adds debug logging for policy file validation”
Updated from global requirements
Delete H803 in flake8 ignore
1.13.0¶
Updated from global requirements
Add note about not all APIs support policy enforcement by user_id
Allow policy file to not exist
Adds debug logging for policy file validation
Fixed unit tests running on Windows
Add Python 3.5 classifier and venv
1.12.0¶
Updated from global requirements
Updated from global requirements
Fix mispelled method name in setup.cfg
Updated from global requirements
Updated from global requirements
Imported Translations from Zanata
1.11.0¶
Updated from global requirements
1.10.0¶
Imported Translations from Zanata
Improve policy sample generation testing
Add helper scripts for generating policy info
1.9.0¶
Add sample file generation script and helper methods
Add equality operator to policy.RuleDefault
Imported Translations from Zanata
Updated from global requirements
Fix typo: ‘olso’ to ‘oslo’
Updated from global requirements
Updated from global requirements
Add reno for release notes management
Add policy registration and authorize method
Updated from global requirements
doc: Fix wrong import statement in usage
1.8.0¶
Trivial: ignore openstack/common in flake8 exclude list
1.7.0¶
Updated from global requirements
Imported Translations from Zanata
Imported Translations from Zanata
Updated from global requirements
Updated from global requirements
Deprecate load_json() in favor of load()
Support policy file in YAML
1.5.0¶
Updated from global requirements
1.4.0¶
Update translation setup
Updated from global requirements
Updated from global requirements
Updated from global requirements
Updated from global requirements
Revert “Pass environment variables of proxy to tox”
Run docs testenv by default with tox
Add oslopolicy-checker command-line tool
1.3.0¶
Updated from global requirements
Don’t crash on RoleCheck when roles not present
assertIsNone(val) instead of assertEqual(None,val)
1.2.0¶
Updated from global requirements
Add string format rendering to RoleCheck.__call__()
Pass environment variables of proxy to tox
Fixes combined “and” and “or” rule handling
Make sure item of policy_dirs is directory
Updated from global requirements
Use dict comprehension
Don’t generate doc from test
1.1.0¶
Trival: Remove ‘MANIFEST.in’
Updated from global requirements
Updated from global requirements
Updated from global requirements
Use requests-mock instead of httpretty in tests
Clarify usage docs
Correct invalid doc references
1.0.0¶
Updated from global requirements
Remove Python 2.6 classifier
Remove python 2.6 and cleanup tox.ini
0.13.0¶
Updated from global requirements
Updated from global requirements
Updated from global requirements
Use JSON generator
Add test for enforce with rule doesn’t exist
Add test for raising default exception
Add test for invalid JSON
Add cover test requirement
Fix a typo in policy.py
0.12.0¶
Updated from global requirements
Custom fixture to avoid external call in HttpCheck
Fix coverage configuration and execution
add auto-generated docs for config options
Add shields.io version/downloads links/badges into README.rst
Updated from global requirements
Use requests in http check instead of urllib
Change ignore-errors to ignore_errors
Updated from global requirements
remove deprecation text for policy_dirs option
0.11.0¶
Updated from global requirements
0.10.0¶
Pass reference then actual to assertEqual
Overwrite option should not cause policy file reloading
Updated from global requirements
Setup translations
Have the enforcer have its own file cache
Updated from global requirements
0.9.0¶
Updated from global requirements
0.8.0¶
Updated from global requirements
Fix typo of ‘available’ in token_fixture.py
Fixes up the API docs and module index
0.7.0¶
Remove oslo-incubator specific code
Move fileutils functions to oslo.policy
Add six and oslo.utils to requirements
Add tox target to find missing requirements
Updated from global requirements
Updated from global requirements
0.6.0¶
Fix Enforcer docstring
0.5.0¶
Expose base check classes as part of public API
Cleanup logging to conform to guidelines
Cleanup logging to conform to guidelines
Remove support for Python 3.3
Updated from global requirements
0.4.0¶
Uncap library requirements for liberty
Fix invalid indentation in _load_policy_file method
Cleanup README.rst and setup.cfg
Avoid reloading policy files in policy.d for every call
Lists for Generic Checks
Updated from global requirements
0.3.1¶
Switch to non-namespaced module imports
0.3.0¶
deprecate policy_dirs option
Updated from global requirements
Expose register and Check as part of public API
provide more descriptive exception
0.2.0¶
Add missing space to help message
Add Rules.from_dict classmethod
Use assertTrue or assertFalse where appropriate
Fix the order of args to assertEqual in tests
0.1.0¶
Clean up configuration option management
Update comments about tox configuration
Fix i18n imports
Change default set of tox environments
Create the temporary files needed for tests
Fix minor spelling issues in oslo.policy
Use single quotes consistently
Do not log on missing or empty policy_dirs
Remove symlinked file from tests
document the migration process and update the docs a bit
Use standard logging in oslo.policy
Updated from global requirements
Remove globals that were introduced for compatibility
Upgrade hacking to >=0.10.0
Remove oslo.concurrency from requirements
Stop shouting test attribute names
Do not use global enforcer for tests
Make use of private modules
Privatize parsing classes
Add entry points for option discovery
Add pep8 import exception for oslo_policy._i18n
Use oslo_i18n
Perform an oslo-sync
General docstring cleanup
Drop use of oslo namespace for oslo libraries
Update .gitignore
Drop usage of namespaced packages
Remove use of graduated modules
Add docstrings for check classes
Correct docstring references
Improve policy documentation
Explicit configuration object
Fix project metadata
Add API documentation
Move project imports after 3rd party imports
Fix tests
Add openstack.common and requirements fixes
exported from oslo-incubator by graduate.sh
Improving docstrings for policy API
Don’t log missing policy.d as a warning
Add rule overwrite flag to Enforcer class
Fixed a problem with neutron http policy check
Expanding the help text for policy_dirs
policy: add a missing staticmethod declaration
Fixes nits in module policy
add list_opts to all modules with configuration options
Correct default rule name for policy.Enforcer
Minor fixes in policy module
Delete graduated serialization files
Remove code that moved to oslo.i18n
Allow dictionary lookup in credentials with dot notation
Remove graduated test and fixtures libraries
Fix typo to show correct log message
Use MultiStrOpt for policy_dirs
Add support for policy configration directories
Fix deletion of cached file for policy enforcer
Make policy debug logging less verbose
Improve help strings
Use oslotest instead of common test module
policy: rename Exception to avoid nose regression
Adds a flag to determine whether to reload the rules in policy
Documenting policy.json syntax
Update oslo log messages with translation domains
Fix policy tests for parallel testing
Allow policy.json resource vs constant check
Replaces use of urlutils with six in policy module
Utilizes assertIsNone and assertIsNotNone
Use hacking import_exceptions for gettextutils._
Use urlutils functions instead of urllib/urllib2
Remove vim header
Use six.string_type instead of basestring
Apply six for metaclass
ConfigFileNotFoundError with proper argument
Keystone user can’t perform revoke_token
Remove useless unit test codes in test_policy
Replace using tests.utils part2
Bump hacking to 0.7.0
Fix wrong argument in openstack common policy
Fix missing argument bug in oslo common policy
Fix policy default_rule issue
Allow use of hacking 0.6.0 and enable new checks
Fix missing argument bug in oslo common policy
Enable H302 hacking check
Enable hacking H404 test
Enable H306 hacking check
python3: python3 binary/text data compatbility
Reduce duplicated code related to policies
Removes len() on empty sequence evaluation
Convert unicode for python3 portability
Replaces standard logging with common logging
Update to use flake8
Removes unused imports in the tests module
update OpenStack, LLC to OpenStack Foundation
Replace direct use of testtools BaseTestCase
Use testtools as test base class
Fix pep8 E125 errors
Revert “Add support for finer-grained policy decisions”
Remove an unneeded ‘global’
Add support for finer-grained policy decisions
Add a ‘not’ operator to the policy langage
Add a new policy language
Remove deprecated policy engine APIs
Rewrite the policy engine from scratch
Use pep8 v1.3.3
Allow non-string items in the creds dict
Use function registration for policy checks
Fix missing gettextutils in several modules
Switch common files to using jsonutils
Update common code to support pep 1.3. bug 1014216
Common-ize policies
initial commit
Initial skeleton project