Ussuri Series Release Notes¶
3.1.2¶
Bug Fixes¶
Fixes the mapping of ‘system_scope’ to ‘system’ when enforce is called with a ‘creds’ dictionary instead of a RequestContext.
3.1.1¶
Bug Fixes¶
[bug 1880959] The behaviour of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the
policy_dirs
option were not reapplied after the rules from the primary policy file have been reapplied due to a change.
3.1.0¶
New Features¶
A new configuration option
enforce_new_defaults
has been added to the[oslo_policy]
group to control whether or not to use the old deprecated defaults. IfTrue
, the old deprecated defaults are not going to be evaluated which means if any existing token is allowed for old defaults but disallowed for new defaults it will be disallowed. It is encouraged to enable this flag along with theenforce_scope
flag so that you can get the benefits of new defaults andscope_type
together. This way operators can switch to new defaults without overwriting the rules in the policy file.
3.0.0¶
Upgrade Notes¶
Support for Python 2.7 has been dropped. The minimum version of Python now supported is Python 3.6.
2.4.0¶
Bug Fixes¶
Deprecated policy warnings are now suppressed in the
oslopolicy-list-redundant
tool so that they don’t overwhelm the relevant output.