Ussuri Series Release Notes¶
Fixes the mapping of ‘system_scope’ to ‘system’ when enforce is called with a ‘creds’ dictionary instead of a RequestContext.
[bug 1880959] The behavior of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the
policy_dirsoption were not reapplied after the rules from the primary policy file have been reapplied due to a change.
A new configuration option
enforce_new_defaultshas been added to the
[oslo_policy]group to control whether or not to use the old deprecated defaults. If
True, the old deprecated defaults are not going to be evaluated which means if any existing token is allowed for old defaults but disallowed for new defaults it will be disallowed. It is encouraged to enable this flag along with the
enforce_scopeflag so that you can get the benefits of new defaults and
scope_typetogether. This way operators can switch to new defaults without overwriting the rules in the policy file.
Support for Python 2.7 has been dropped. The minimum version of Python now supported is Python 3.6.
Deprecated policy warnings are now suppressed in the
oslopolicy-list-redundanttool so that they don’t overwhelm the relevant output.