Merge "Ensure orders policy-in-code matches controller"

barbican/common/policies/orders.py

@@ -18,10 +18,10 @@ rules = [
                        'rule:admin_or_creator'),
     policy.RuleDefault('orders:get',
                        'rule:all_but_audit'),
+    policy.RuleDefault('orders:put',
+                       'rule:admin_or_creator'),
     policy.RuleDefault('order:get',
                        'rule:all_users'),
-    policy.RuleDefault('order:put',
-                       'rule:admin_or_creator'),
     policy.RuleDefault('order:delete',
                        'rule:admin'),
 ]

releasenotes/notes/remap-policy-to-match-controller-1673ec7c88235227.yaml

@@ -0,0 +1,10 @@
+---
+features:
+  - |
+    Remap the `order:put` to `orders:put` to align with language in the orders
+    controller.
+upgrade:
+  - |
+    (For deployments overriding default policies) After upgrading, please review
+    Barbican policy files and ensure that you port any rules tied to `order:put`
+    are remapped to `orders:put`.