commit 55e5dfe640e1d8bdc5250c17420fcc5a3fca7b3f
author Sergey Vilgelm <sergey@vilgelm.info> Mon Jan 07 11:59:41 2019 -0600
committer Sergey Vilgelm <sergey@vilgelm.info> Mon Jan 28 07:45:07 2019 -0600
tree 8103fa68c8840129744e3b44c12a68776923b92e
parent cd2c5fdbb9c4565b9e0ca30009e567e013587048

Fix OverPermission exception for keystone tests

Extend the roles in `access_token` according to the implementation[0]
of the bp basic-default-roles:
    `admin` implies `member` implies `reader`
Support deprecated rules.

[0] Ie18a269e3d1075d955fe494acaf634a393c6bd7b

Change-Id: I0d0de2a20b03548a7e5dab1ee7af7b72651abcb6
Story: 2004709
Task: 28740

releasenotes/notes/support-deprecated-roles-eae9dc742cb4fa33.yaml

diff --git a/releasenotes/notes/support-deprecated-roles-eae9dc742cb4fa33.yaml b/releasenotes/notes/support-deprecated-roles-eae9dc742cb4fa33.yaml
new file mode 100644
index 0000000..0d581a0
--- /dev/null
+++ b/releasenotes/notes/support-deprecated-roles-eae9dc742cb4fa33.yaml
@@ -0,0 +1,7 @@
+---
+features:
+  - |
+    Patrole will validate the deprecated policy rules (if applicable) alongside
+    the current policy rule.
+    Add ``[patrole] validate_deprecated_rules`` enabled by default to validate
+    the deprecated rules.