these are two disjoint entities. One is for oslo_policy (the default rule), the other is for keystone's policy database (largely unused).
with the release of oslo.policy as it's own project, this relationship had been made more clear, and no longer needs to be grouped together as the initial bug report suggests. ** Changed in: keystone Status: In Progress => Won't Fix ** Changed in: keystone Assignee: Steve Martinelli (stevemar) => (unassigned) -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/1276017 Title: move default rule to policy section in keystone.conf Status in OpenStack Identity (keystone): Won't Fix Status in oslo-incubator: Won't Fix Bug description: The following is currently in the keystone.conf file: # Rule to check if no matching policy definition is found # FIXME(dolph): This should really be defined as [policy] default_rule # policy_default_rule = admin_required As the comment suggest, we should move the config option to the policy section. This will also impact oslo and we should ensure the old option is still supported for backwards compatibility. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/1276017/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp