From 919c3280aa79762df8475f131a65d12b78ac436e Mon Sep 17 00:00:00 2001 From: Slawek Kaplonski Date: Tue, 5 Oct 2021 11:16:04 +0200 Subject: Enforce scope check always when rule has scope_types set Previously it was checked only for registered rules but not for rules which are subclasses of the BaseCheck class. Now it's checked for all rules which have scope_types set. It's required for e.g. Neutron as it is creating Check objects based on the defined policy rules to e.g. include in the check attributes like network's provider parameters, etc. Depends-On: https://review.opendev.org/c/openstack/neutron/+/815838 Depends-On: https://review.opendev.org/c/openstack/neutron/+/818725 Closes-Bug: #1923503 Change-Id: I55258c1f999c84220518d1fbbf5e1e514361cebe --- ...pe-checks-always-when-rule-has-scope_types-8f983cdf70766e4f.yaml | 6 ++++++ 1 file changed, 6 insertions(+) create mode 100644 releasenotes/notes/enforce-scope-checks-always-when-rule-has-scope_types-8f983cdf70766e4f.yaml (limited to 'releasenotes') diff --git a/releasenotes/notes/enforce-scope-checks-always-when-rule-has-scope_types-8f983cdf70766e4f.yaml b/releasenotes/notes/enforce-scope-checks-always-when-rule-has-scope_types-8f983cdf70766e4f.yaml new file mode 100644 index 0000000..d13c523 --- /dev/null +++ b/releasenotes/notes/enforce-scope-checks-always-when-rule-has-scope_types-8f983cdf70766e4f.yaml @@ -0,0 +1,6 @@ +--- +other: + - | + Scope check is enforced for all rules, registered ones as well as the ones + which are subclasses of the ``BaseCheck`` class if rule has ``scope_types`` + set. -- cgit v1.2.1