Ussuri Series Release Notes

3.1.2

Bug Fixes

• Fixes the mapping of ‘system_scope’ to ‘system’ when enforce is called with a ‘creds’ dictionary instead of a RequestContext.

3.1.1

Bug Fixes

• [bug 1880959] The behavior of policy file reloading from policy directories was fixed. Previously the rules from policy files located in the directories specified in the policy_dirs option were not reapplied after the rules from the primary policy file have been reapplied due to a change.

3.1.0

New Features

• A new configuration option enforce_new_defaults has been added to the [oslo_policy] group to control whether or not to use the old deprecated defaults. If True, the old deprecated defaults are not going to be evaluated which means if any existing token is allowed for old defaults but disallowed for new defaults it will be disallowed. It is encouraged to enable this flag along with the enforce_scope flag so that you can get the benefits of new defaults and scope_type together. This way operators can switch to new defaults without overwriting the rules in the policy file.

3.0.0

Upgrade Notes

• Support for Python 2.7 has been dropped. The minimum version of Python now supported is Python 3.6.

2.4.0

Bug Fixes

• Deprecated policy warnings are now suppressed in the oslopolicy-list-redundant tool so that they don’t overwhelm the relevant output.