Merge "Add release note for policy sample file update"

2016-03-15 18:08:49 +00:00
parent 7dd80fd659 83467b8c68
commit 4a0d256d52
2 changed files with 16 additions and 6 deletions
@@ -1,6 +0,0 @@
---
-upgrade:
-  - Default RBAC policy for lock operations has been modified to
-    admin_or_owner for the stable V2.0 API. Please understand to modify the
-    policy if you still keep to have anyone to lock an instance and you're
-    still using the stable API endpoint.
@@ -0,0 +1,16 @@
+---
+other:
+
+  - The sample policy file shipped with Nova contained many policies set to
+    ""(allow all) which was not the proper default for many of those checks. It
+    was also a source of confusion as some people thought "" meant to use the
+    default rule. These empty policies have been updated to be explicit in all
+    cases.
+
+    Many of them were changed to match the default rule of "admin_or_owner"
+    which is a more restrictive policy check but does not change the
+    restrictiveness of the API calls overall because there are similar checks
+    in the database already.
+
+    This does not affect any existing deployment, just the sample file included
+    for use by new deployments.