)]}'
{"id":"openstack%2Faodh~988417","triplet_id":"openstack%2Faodh~master~I6cf02c3d78cd31f8aa3b2ec5e9bf6a5604b2c58c","project":"openstack/aodh","branch":"master","attention_set":{},"removed_from_attention_set":{"32968":{"account":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},"last_update":"2026-06-08 08:20:31.000000000","reason":"\u003cGERRIT_ACCOUNT_32968\u003e replied on the change","reason_account":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"}},"34975":{"account":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"last_update":"2026-06-08 09:41:43.000000000","reason":"Change was submitted"}},"hashtags":[],"change_id":"I6cf02c3d78cd31f8aa3b2ec5e9bf6a5604b2c58c","subject":"Align policies with SRBAC goal","status":"MERGED","created":"2026-05-13 09:50:38.000000000","updated":"2026-06-08 09:43:11.000000000","submitted":"2026-06-08 09:41:43.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":3,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"988417","meta_rev_id":"5ad638800a40ba55eda7809e263dc34c41bd89b2","_number":988417,"virtual_id_number":988417,"owner":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":0,"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2026-06-08 09:41:43.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"recommended":{"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},"all":[{"value":1,"date":"2026-05-19 09:23:39.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},{"value":2,"date":"2026-06-01 13:56:05.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":2,"date":"2026-06-08 08:20:31.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},"all":[{"value":0,"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},{"value":0,"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"value":1,"date":"2026-06-08 08:20:31.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},{"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2026-05-13 11:20:30.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2026-05-15 13:29:15.000000000","updated_by":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"reviewer":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"state":"CC"},{"updated":"2026-05-19 09:23:39.000000000","updated_by":{"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},"reviewer":{"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},"state":"REVIEWER"},{"updated":"2026-06-01 13:56:05.000000000","updated_by":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"reviewer":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"state":"REVIEWER"},{"updated":"2026-06-03 07:42:39.000000000","updated_by":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"reviewer":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},"state":"REVIEWER"}],"messages":[{"id":"84133beaccb41ffa84fba98bcb5af85c206bf98a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"date":"2026-05-13 09:50:38.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"32886f790dbc3638cff6ec8bf19cab184b570bad","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-13 11:20:30.000000000","message":"Patch Set 1: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/0b418e945e1141a78c3000b297e12058\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1eb9168462ca4e2a898469d27e267853 : SUCCESS in 6m 44s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/f05440f879a242f284ee1aa3cbbbc786 : SUCCESS in 6m 57s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/3a3c9e6c730b439a800f2ee304c4dc24 : SUCCESS in 6m 38s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/a4abe1ff1d5e4f508a7b75315c01654f : SUCCESS in 9m 37s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/10b721465dc04a588b9f0cac08b3267c : SUCCESS in 8m 53s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/81ecb224d8c74aa1998598c642c241b9 : SUCCESS in 7m 26s\n- grenade-aodh https://zuul.opendev.org/t/openstack/build/a2677f865b6e469fbfeb4a5e0ff87adc : SUCCESS in 1h 18m 08s\n- telemetry-dsvm-integration https://zuul.opendev.org/t/openstack/build/cb4765edae3047fe93122de3371c8de2 : SUCCESS in 51m 18s","accounts_in_message":[],"_revision_number":1},{"id":"d3101435a054310ff167c84b644d45d329859cb1","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"date":"2026-05-14 09:41:14.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified+1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":2},{"id":"7af940a2275b35139139c79dab95275ff63033fa","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-14 10:36:33.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/60e1b118183340909c1e68648b352c9e\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/4ee1d525d0f348e0b8e41846139b2a09 : SUCCESS in 3m 13s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/2b21afd10c2f4ee8b1406333c827acb3 : FAILURE in 4m 07s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/090901d4ce4049adaba2d1e9bc3ca510 : FAILURE in 3m 05s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/d8701afd566c476fa7831a718403a078 : FAILURE in 6m 28s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4c78c8b2aa1a400ba5c41fa847e53c04 : FAILURE in 7m 12s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/7300aa8fc4fa4e038ef4a2eda2f56b07 : SUCCESS in 6m 53s\n- grenade-aodh https://zuul.opendev.org/t/openstack/build/36292f7c19a54a76af88e8d6ad6b7651 : SUCCESS in 42m 59s\n- telemetry-dsvm-integration https://zuul.opendev.org/t/openstack/build/361c9084d9b84cd7b51d70fe38521edd : SUCCESS in 49m 35s","accounts_in_message":[],"_revision_number":2},{"id":"170523b909e5de18f4f647c08cd2bd781af1d515","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"date":"2026-05-14 14:44:46.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified-1 (copy condition: \"NEVER\")\n","accounts_in_message":[],"_revision_number":3},{"id":"1469828d8a12e1d18e632dbc1e80535940143ab9","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-14 16:16:56.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/c0ed95debe0b4101b4e39c5ae8fbf9cd\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c18309b446c3498bacd2dc96aabbaf99 : SUCCESS in 6m 04s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/ecd341b9a9a04736b3b47de2122b5d25 : SUCCESS in 4m 50s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/fb0d218f4a32468e8bb049725e6e7739 : SUCCESS in 7m 45s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/4712555501514140adf4942966530d51 : SUCCESS in 7m 21s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/444d70d970d949c8952054b7fde47cd4 : FAILURE in 15m 15s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/4239f98aa0ce4b6a9ff3ad0135b1287d : SUCCESS in 7m 34s\n- grenade-aodh https://zuul.opendev.org/t/openstack/build/696082cfd11b445fb606494fb5f8f46c : SUCCESS in 1h 16m 14s\n- telemetry-dsvm-integration https://zuul.opendev.org/t/openstack/build/b9223770adbe49c79781f4db7000b8fd : SUCCESS in 52m 46s","accounts_in_message":[],"_revision_number":3},{"id":"6df8b094087fe1422be92706a3652e30077202d0","author":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"date":"2026-05-15 07:39:23.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"59489a606d782a72cc085103eaa00e6d88ae6c4e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-05-15 08:58:23.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/1ea624c2c719419cb000c3c08986d793\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2805074093ba48fbb82f95c5294ab644 : SUCCESS in 3m 36s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/b1f9093804e94376bd8334f160dcaa8c : SUCCESS in 4m 48s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/dd0fc306cfa6427e973f89c24b63440d : SUCCESS in 4m 34s\n- openstack-tox-py314 https://zuul.opendev.org/t/openstack/build/59f396cecd434b3e8f5aad2817b0fc6a : SUCCESS in 7m 28s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/df1a363a588a4e6c9acca5a5cef2c131 : SUCCESS in 8m 08s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/9fc702a96b5d43a4bc50b16d038b79c6 : SUCCESS in 6m 39s\n- grenade-aodh https://zuul.opendev.org/t/openstack/build/2cff32582c524dc2aa74018867920baf : SUCCESS in 1h 13m 22s\n- telemetry-dsvm-integration https://zuul.opendev.org/t/openstack/build/47aaf82c5dbe493a9d81b6b8357e2094 : SUCCESS in 59m 37s","accounts_in_message":[],"_revision_number":3},{"id":"5040df35606436afdd1a53b96cdbe4ed0b019618","author":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"date":"2026-05-15 13:29:15.000000000","message":"Patch Set 3:\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"3f78686cae77ef5c68e6cbc34488f27625e53570","author":{"_account_id":20676,"name":"daniel.pawlik","display_name":"Daniel Pawlik","email":"dpawlik@redhat.com","username":"daniel.pawlik"},"date":"2026-05-19 09:23:39.000000000","message":"Patch Set 3: Code-Review+1","accounts_in_message":[],"_revision_number":3},{"id":"34d4b7e813dc080e80080e1a1f69db4ab3303266","author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"date":"2026-06-01 13:56:05.000000000","message":"Patch Set 3: Code-Review+2\n\n(1 comment)","accounts_in_message":[],"_revision_number":3},{"id":"43f90020a3cd650a2be31e1fc94fab0733a5059f","author":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"},"date":"2026-06-08 08:20:31.000000000","message":"Patch Set 3: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":3},{"id":"264fbdd80b95462038705412d7cc5399f3c1d6e0","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-08 08:21:02.000000000","message":"Patch Set 3: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":3},{"id":"25b0050cf141fe957ed7e13f98e1701a8f48fe14","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-08 09:41:43.000000000","message":"Patch Set 3: Verified+2\n\nBuild succeeded (gate pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/c4c3912daa374160b69a60f92a769c81\n\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/871ac2ae350043db83ac214f4d6241f4 : SUCCESS in 3m 52s\n- openstack-tox-py311 https://zuul.opendev.org/t/openstack/build/15a83d691c4b4d62862044af2f3209d9 : SUCCESS in 4m 57s\n- openstack-tox-py313 https://zuul.opendev.org/t/openstack/build/62f8d0079d34415f92062d097ccdfc26 : SUCCESS in 7m 49s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/55f62513f490427fa0e1b73810156667 : SUCCESS in 8m 19s\n- build-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/b316147c6db44696b3f8505e2463427d : SUCCESS in 7m 46s\n- grenade-aodh https://zuul.opendev.org/t/openstack/build/b3679229e81c430b85dde4f78af13d45 : SUCCESS in 1h 10m 00s\n- telemetry-dsvm-integration https://zuul.opendev.org/t/openstack/build/0100967c666c40d7bd9d41441627a020 : SUCCESS in 1h 01m 00s\n- telemetry-dsvm-integration-ipv6-only https://zuul.opendev.org/t/openstack/build/976669c70f8b4e989c9f466db13f9fb8 : SUCCESS in 46m 35s","accounts_in_message":[],"_revision_number":3},{"id":"ebabdcdb1f8be8664aaf404a9965be8a2204acb5","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-08 09:41:43.000000000","message":"Change has been successfully merged","accounts_in_message":[],"_revision_number":3},{"id":"5ad638800a40ba55eda7809e263dc34c41bd89b2","tag":"autogenerated:zuul:promote","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2026-06-08 09:43:11.000000000","message":"Patch Set 3:\n\nBuild succeeded (promote pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/de079abebccc4d1393b87024f5d7309b\n\n- promote-openstack-tox-docs https://zuul.opendev.org/t/openstack/build/59ec1b964aff4de5923838b1d794d910 : SUCCESS in 1m 03s\n- promote-openstack-releasenotes https://zuul.opendev.org/t/openstack/build/e591d1a2be88429b9a130528bbf51277 : SUCCESS in 1m 09s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"0e0d4913280edb14d2f1c666f9aa4c71dc12329e","revisions":{"44eb6ca23127c2734934bae62e65bb02a2ec5aee":{"kind":"REWORK","_number":1,"created":"2026-05-13 09:50:38.000000000","uploader":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"ref":"refs/changes/17/988417/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/aodh","ref":"refs/changes/17/988417/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/aodh refs/changes/17/988417/1"}}},"commit":{"parents":[{"commit":"b97c07e8c34affce06df90c6d72224b0fa228491","subject":"wip: Enforce new policy rules by default","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/b97c07e8c34affce06df90c6d72224b0fa228491"}]}],"author":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-13 08:27:58.000000000","tz":0},"committer":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-13 09:48:37.000000000","tz":0},"subject":"wip: Fix SRBAC","message":"wip: Fix SRBAC\n\n- Remove the \"project admin\" persona. Use the legacy \"non-project\" admin\n  instead as described in [1].\n- Introduce \"project \u003cpersona\u003e or admin\" rules, which is used everywhere\n  instead of just the project scoped personas\n- Retrieve target project for policy enforcement in the alarms POST\n  endpoint, so that project scoped personas can be correctly used\n- Modify tests (use roles as defined in policies, expect alarm creation\n  without auth to fail)\n\n[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#legacy-admin-continues-to-work-as-it-is\n\nAssisted-By: Claude-Code claude-opus-4-6\nChange-Id: I6cf02c3d78cd31f8aa3b2ec5e9bf6a5604b2c58c\nSigned-off-by: Jaromir Wysoglad \u003cjwysogla@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/44eb6ca23127c2734934bae62e65bb02a2ec5aee"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/44eb6ca23127c2734934bae62e65bb02a2ec5aee"}]},"branch":"refs/heads/master"},"cfebc809564d7bf4dda172ace01a0b6ada57b76a":{"kind":"REWORK","_number":2,"created":"2026-05-14 09:41:14.000000000","uploader":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"ref":"refs/changes/17/988417/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/aodh","ref":"refs/changes/17/988417/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/aodh refs/changes/17/988417/2"}}},"commit":{"parents":[{"commit":"e149a4f1ea8fb200f225d41b65a1ae29f21c8093","subject":"Merge \"Remove aodh-config-generator\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/e149a4f1ea8fb200f225d41b65a1ae29f21c8093"}]}],"author":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-13 08:27:58.000000000","tz":0},"committer":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-14 09:39:12.000000000","tz":0},"subject":"Align policies with SRBAC goal","message":"Align policies with SRBAC goal\n\n- Remove the \"project admin\" persona. Use the legacy \"non-project\" admin\n  instead as described in [1].\n- Introduce \"project \u003cpersona\u003e or admin\" rules, which is used everywhere\n  instead of just the project scoped personas\n- Retrieve target project for policy enforcement in the alarms POST\n  endpoint, so that project scoped personas can be correctly used\n- Modify tests (use roles as defined in policies, expect alarm creation\n  without auth to fail)\n\n[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#legacy-admin-continues-to-work-as-it-is\n\nAssisted-By: Claude-Code claude-opus-4-6\nChange-Id: I6cf02c3d78cd31f8aa3b2ec5e9bf6a5604b2c58c\nSigned-off-by: Jaromir Wysoglad \u003cjwysogla@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/cfebc809564d7bf4dda172ace01a0b6ada57b76a"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/cfebc809564d7bf4dda172ace01a0b6ada57b76a"}]},"branch":"refs/heads/master"},"0e0d4913280edb14d2f1c666f9aa4c71dc12329e":{"kind":"REWORK","_number":3,"created":"2026-05-14 14:44:46.000000000","uploader":{"_account_id":34975,"name":"Jaromír Wysoglad","email":"jwysogla@redhat.com","username":"jwysogla"},"ref":"refs/changes/17/988417/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/aodh","ref":"refs/changes/17/988417/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/aodh refs/changes/17/988417/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/aodh refs/changes/17/988417/3"}}},"commit":{"parents":[{"commit":"e149a4f1ea8fb200f225d41b65a1ae29f21c8093","subject":"Merge \"Remove aodh-config-generator\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/e149a4f1ea8fb200f225d41b65a1ae29f21c8093"}]}],"author":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-13 08:27:58.000000000","tz":0},"committer":{"name":"Jaromir Wysoglad","email":"jwysogla@redhat.com","date":"2026-05-14 14:37:00.000000000","tz":0},"subject":"Align policies with SRBAC goal","message":"Align policies with SRBAC goal\n\n- Remove the \"project admin\" persona. Use the legacy \"non-project\" admin\n  instead as described in [1].\n- Introduce \"project \u003cpersona\u003e or admin\" rules, which is used everywhere\n  instead of just the project scoped personas\n- Retrieve target project for policy enforcement in the alarms POST\n  endpoint, so that project scoped personas can be correctly used\n- Modify tests (use roles as defined in policies, expect alarm creation\n  without auth to fail)\n\n[1] https://governance.openstack.org/tc/goals/selected/consistent-and-secure-rbac.html#legacy-admin-continues-to-work-as-it-is\n\nAssisted-By: Claude-Code claude-opus-4-6\nChange-Id: I6cf02c3d78cd31f8aa3b2ec5e9bf6a5604b2c58c\nSigned-off-by: Jaromir Wysoglad \u003cjwysogla@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/0e0d4913280edb14d2f1c666f9aa4c71dc12329e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/aodh/commit/0e0d4913280edb14d2f1c666f9aa4c71dc12329e"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"CLOSED","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY","applied_by":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"}},{"label":"Workflow","status":"MAY","applied_by":{"_account_id":32968,"name":"Juan Larriba","email":"jlarriba@redhat.com","username":"jlarriba"}}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dMAX"],"failing_atoms":["label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dMAX"],"failing_atoms":["label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dMAX"],"failing_atoms":["label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}