Remove empty policy.json
Supplying a policy.json file is no longer necessary. Change-Id: I33b84c4d68e8077271447bcbdea4b7052eb01204 Depends-On: https://review.opendev.org/694386
This commit is contained in:
parent
5c17e4c7ef
commit
5bffac0186
@ -1,2 +0,0 @@
|
|||||||
{
|
|
||||||
}
|
|
@ -4,8 +4,13 @@
|
|||||||
# property_protection_rule_format=policies is enabled.
|
# property_protection_rule_format=policies is enabled.
|
||||||
#
|
#
|
||||||
# Specify regular expression for which properties will be protected in []
|
# Specify regular expression for which properties will be protected in []
|
||||||
# For each section, specify CRUD permissions. You may refer to policies defined
|
# For each section, specify CRUD permissions.
|
||||||
# in policy.json.
|
#
|
||||||
|
# The permissions specified may refer to policies defined in a policy file.
|
||||||
|
# The name of this file may be specified as the value of the policy_file
|
||||||
|
# option in the [oslo_policy] section of the glance-api.conf file. The
|
||||||
|
# format of this file may be JSON or YAML.
|
||||||
|
#
|
||||||
# The property rules will be applied in the order specified. Once
|
# The property rules will be applied in the order specified. Once
|
||||||
# a match is found the remaining property rules will not be applied.
|
# a match is found the remaining property rules will not be applied.
|
||||||
#
|
#
|
||||||
|
@ -0,0 +1,16 @@
|
|||||||
|
---
|
||||||
|
upgrade:
|
||||||
|
- |
|
||||||
|
Operators who use property protections with the
|
||||||
|
``property_protection_rule_format`` set to ``policies`` must still
|
||||||
|
define the policy rules used for property protections in a policy
|
||||||
|
file. The content of the file may be JSON or YAML. Additionally,
|
||||||
|
we suggest that the absolute pathname of this file be set as the
|
||||||
|
value of ``policy_file`` in the ``[oslo_policy]`` section of the
|
||||||
|
``glance-api.conf`` file.
|
||||||
|
|
||||||
|
Be aware that if you define a policy rule for ``default`` or
|
||||||
|
``context_is_admin``, that policy rule will also be used by the
|
||||||
|
policies that govern permissions to perform actions using the
|
||||||
|
Images API, even if these actions are not specified in the policy
|
||||||
|
file.
|
Loading…
Reference in New Issue
Block a user