If an user uses Enforcer without overwriting (Enforcer(overwrite=False))
we should not reset rules and only update loaded rules.
Enforcer without overwriting is a weird behavior, but it is supported at this moment.
Maybe it will be eliminated in future because it's misleading.
Operator cannot conclude what rules are loaded by simply looking in config files.
Reviewed: https:/ /review. opendev. org/c/openstack /oslo.policy/ +/814933 /opendev. org/openstack/ oslo.policy/ commit/ 302643b027a3f3d 894c32054cee222 0e02a20a8a
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 302643b027a3f3d 894c32054cee222 0e02a20a8a
Author: mitya-eremeev-2 <email address hidden>
Date: Thu Oct 21 14:45:52 2021 +0000
Don't reset rules without overwriting
If an user uses Enforcer without overwriting (Enforcer( overwrite= False))
we should not reset rules and only update loaded rules.
Enforcer without overwriting is a weird behavior, but it is supported at this moment.
Maybe it will be eliminated in future because it's misleading.
Operator cannot conclude what rules are loaded by simply looking in config files.
Change-Id: I2871407f8c7417 a016415ccc166c1 f37a9e17908
Closes-Bug: 1943584