keystone/releasenotes
Kristi Nikolla b874977455 Deprecate [token] infer_roles=False
The option `[token] infer_roles=False` is being deprecated in
favor of always expanding role implications during token
validation.

Default roles depend on a chain of implied role assignments.
Ex: an admin user will also have the reader and member role.
By ensuring that all these roles will always appear on the
token validation response, we can improve the simplicity and
readability of policy files.

blueprint deprecated-as-of-rocky

Change-Id: Id36c5b8f6a92f5f3e42e4bcedc3e2dd64eaeb130
2018-07-25 15:01:49 -04:00
..
notes Deprecate [token] infer_roles=False 2018-07-25 15:01:49 -04:00
source Imported Translations from Zanata 2018-03-08 06:31:02 +00:00