Remove empty policy.json

Supplying a policy.json file is no longer necessary.

Change-Id: I33b84c4d68e8077271447bcbdea4b7052eb01204
Depends-On: https://review.opendev.org/694386
This commit is contained in:
Zane Bitter 2019-11-14 14:05:38 -05:00 committed by Brian Rosmaita
parent 5c17e4c7ef
commit 5bffac0186
3 changed files with 23 additions and 4 deletions

View File

@ -1,2 +0,0 @@
{
}

View File

@ -4,8 +4,13 @@
# property_protection_rule_format=policies is enabled.
#
# Specify regular expression for which properties will be protected in []
# For each section, specify CRUD permissions. You may refer to policies defined
# in policy.json.
# For each section, specify CRUD permissions.
#
# The permissions specified may refer to policies defined in a policy file.
# The name of this file may be specified as the value of the policy_file
# option in the [oslo_policy] section of the glance-api.conf file. The
# format of this file may be JSON or YAML.
#
# The property rules will be applied in the order specified. Once
# a match is found the remaining property rules will not be applied.
#

View File

@ -0,0 +1,16 @@
---
upgrade:
- |
Operators who use property protections with the
``property_protection_rule_format`` set to ``policies`` must still
define the policy rules used for property protections in a policy
file. The content of the file may be JSON or YAML. Additionally,
we suggest that the absolute pathname of this file be set as the
value of ``policy_file`` in the ``[oslo_policy]`` section of the
``glance-api.conf`` file.
Be aware that if you define a policy rule for ``default`` or
``context_is_admin``, that policy rule will also be used by the
policies that govern permissions to perform actions using the
Images API, even if these actions are not specified in the policy
file.