)]}'
{"etc/barbican/policy.json":[{"author":{"_account_id":11561,"name":"Dave McCowan","email":"dmccowan@cisco.com","username":"dave-mccowan"},"change_message_id":"4e0c1a01b63a65fc7c2e786dde1afa4abe826a59","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin\": \"role:barbican:admin\","},{"line_number":3,"context_line":"    \"observer\": \"role:barbican:observer\","},{"line_number":4,"context_line":"    \"creator_role\": \"role:barbican:creator\","},{"line_number":5,"context_line":"    \"audit\": \"role:barbican:audit\","}],"source_content_type":"application/json","patch_set":1,"id":"fa1b9901_602406c6","line":2,"updated":"2015-08-21 16:33:14.000000000","message":"Based on my recent CR, we\u0027ll need five roles now.\nHow about:\n\"key-manager:service-admin\"\n\"key-manager:project-admin\"\n\"key-manager:creator\"\n\"key-manager:observer\"\n\"key-manager:audit\"","commit_id":"b9909b71d730c65f2068801cb4e25362c5827e38"},{"author":{"_account_id":1091,"name":"Arun Kant","email":"arukant@cisco.com","username":"arunkant-uws"},"change_message_id":"dd4421e4b5e32b126fab7aea3ab6f0565cbcaece","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin\": \"role:barbican:admin\","},{"line_number":3,"context_line":"    \"observer\": \"role:barbican:observer\","},{"line_number":4,"context_line":"    \"creator_role\": \"role:barbican:creator\","},{"line_number":5,"context_line":"    \"audit\": \"role:barbican:audit\","}],"source_content_type":"application/json","patch_set":1,"id":"fa1b9901_c4cf1f28","line":2,"in_reply_to":"fa1b9901_602406c6","updated":"2015-08-21 19:13:27.000000000","message":"+1","commit_id":"b9909b71d730c65f2068801cb4e25362c5827e38"},{"author":{"_account_id":10670,"name":"Michael McCune","email":"elmiko@redhat.com","username":"mimccune"},"change_message_id":"fddce023f76c3482a6a9dd0e059c884de222d2cc","unresolved":false,"context_lines":[{"line_number":22,"context_line":"    \"secret_decrypt_non_private_read\": \"rule:all_but_audit and rule:secret_project_match and not rule:secret_private_read\","},{"line_number":23,"context_line":"    \"container_non_private_read\": \"rule:all_users and rule:container_project_match and not rule:container_private_read\","},{"line_number":24,"context_line":""},{"line_number":25,"context_line":"    \"version:get\": \"@\","},{"line_number":26,"context_line":"    \"secret:decrypt\": \"rule:secret_decrypt_non_private_read or rule:secret_creator_user or rule:secret_acl_read\","},{"line_number":27,"context_line":"    \"secret:get\": \"rule:secret_non_private_read or rule:secret_creator_user or rule:secret_acl_read\","},{"line_number":28,"context_line":"    \"secret:put\": \"rule:admin_or_creator_role and rule:secret_project_match\","}],"source_content_type":"application/json","patch_set":1,"id":"fa1b9901_fe08a02a","line":25,"updated":"2015-08-17 20:51:12.000000000","message":"you will also want to prefix these commands with the service type to ensure that they won\u0027t collide in an aggregated policy file. for example:\n\n    \"key-manager:version:get\": \"@\",","commit_id":"b9909b71d730c65f2068801cb4e25362c5827e38"}]}