summaryrefslogtreecommitdiff
path: root/oslo_policy/opts.py
diff options
context:
space:
mode:
Diffstat (limited to 'oslo_policy/opts.py')
-rw-r--r--oslo_policy/opts.py11
1 files changed, 11 insertions, 0 deletions
diff --git a/oslo_policy/opts.py b/oslo_policy/opts.py
index e0e1dd6..5eb93d7 100644
--- a/oslo_policy/opts.py
+++ b/oslo_policy/opts.py
@@ -34,6 +34,17 @@ _options = [
'will be raised. If ``False``, a message will be '
'logged informing operators that policies are being '
'invoked with mismatching scope.')),
+ cfg.BoolOpt('enforce_new_defaults',
+ default=False,
+ help=_('This option controls whether or not to use old '
+ 'deprecated defaults when evaluating policies. If '
+ '``True``, the old deprecated defaults are not going '
+ 'to be evaluated. This means if any existing token is '
+ 'allowed for old defaults but is disallowed for new '
+ 'defaults, it will be disallowed. It is encouraged to '
+ 'enable this flag along with the ``enforce_scope`` '
+ 'flag so that you can get the benefits of new defaults '
+ 'and ``scope_type`` together')),
cfg.StrOpt('policy_file',
default='policy.json',
help=_('The relative or absolute path of a file that maps '