summaryrefslogtreecommitdiff
path: root/releasenotes/notes/support-rbac-824a2d02c8746d3d.yaml
blob: faaa3283c104bfe54abe0bbebb949ab45638ee8d (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
---
features:
  - |
    The default policies provided by heat api have been updated to add support
    for default roles and system scope. This is part of a broader community
    effort to support read-only roles and implement secure, consistent default
    policies.
    
    Refer to `the Keystone documentation`__ for more information on the reason
    for these changes.

    __ https://docs.openstack.org/keystone/latest/admin/service-api-protection.html
deprecations:
  - |
    The old default policy rules have been deprecated for removal in Xena cycle.