Empty any and all rules for API-based role mappings are trappy and should not be allowed (but they've always been).
We should start by deprecating them, and eventually remove them.
Deprecation entails emitting response warning headers when such role mappings are created or changed, as well as when such role mappings are actually used to assign roles to authn users.
Empty
any
andall
rules for API-based role mappings are trappy and should not be allowed (but they've always been). We should start by deprecating them, and eventually remove them. Deprecation entails emitting response warning headers when such role mappings are created or changed, as well as when such role mappings are actually used to assign roles to authn users.