)]}'
{"id":"openstack%2Fbarbican~738521","triplet_id":"openstack%2Fbarbican~master~Ic1a7e77061314edcd7dcd40aaa5a7c41100bf1dc","project":"openstack/barbican","branch":"master","topic":"implement-scope-types-and-default-roles","hashtags":[],"change_id":"Ic1a7e77061314edcd7dcd40aaa5a7c41100bf1dc","subject":"WIP: Implement scope_types and default roles for secrets","status":"ABANDONED","created":"2020-06-29 22:05:00.000000000","updated":"2021-11-22 21:36:40.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"506b2c685404680f279932d85b49986d1364fb50","_number":738521,"virtual_id_number":738521,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"date":"2021-03-19 12:37:34.000000000","_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"tag":"autogenerated:zuul:check","value":1,"date":"2020-07-02 02:50:06.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"permitted_voting_range":{"min":-2,"max":2},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"value":0,"permitted_voting_range":{"min":-1,"max":0},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-06-29 22:05:00.000000000","updated_by":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"reviewer":{"_account_id":9954,"name":"Lance Bragstad","username":"lbragstad","inactive":true},"state":"REVIEWER"},{"updated":"2020-06-29 22:23:40.000000000","updated_by":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"reviewer":{"_account_id":7973,"name":"Douglas Mendizábal","email":"dmendiza@redhat.com","username":"dougmendizabal"},"state":"REVIEWER"},{"updated":"2020-07-02 02:50:06.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"43925f4537c13b60cfd52bcb267757a5c7fa330f","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-06-29 22:05:00.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"9501a01d82f54b706b0ae821c3e51bf5c5bc585a","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-29 22:59:40.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/20ea4dce6a2a412193a1b2d1dc3240cd : FAILURE in 5m 00s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/725ed2bb0022476db2800f6d7d7ed9f9 : SUCCESS in 4m 39s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/3f9ec78a5e954f9e84cb6aba883f78bf : FAILURE in 3m 52s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/575e006ec5344024a64368d79e7c20dc : FAILURE in 5m 09s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/8bfe825c776b4b6bbc1f7ddc441bea6a : FAILURE in 5m 40s\n- barbican-tox-functional https://zuul.opendev.org/t/openstack/build/dba3dfc4ce334e15b60940b7e35bc500 : FAILURE in 32m 05s\n- barbican-dogtag-tox-functional https://zuul.opendev.org/t/openstack/build/a1dc6ae82bc947df88b63d5e09191f01 : POST_FAILURE in 35m 49s (non-voting)\n- barbican-vault-tox-functional https://zuul.opendev.org/t/openstack/build/5289c6d2a90a41c69bd0f488e852895f : FAILURE in 31m 06s (non-voting)\n- barbican-grenade https://zuul.opendev.org/t/openstack/build/6208bd1b34984ffd8adc69da00f72af3 : SUCCESS in 53m 31s (non-voting)\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/098f4aa1a90d4bb4a11d6e66002b3a09 : FAILURE in 39m 24s","accounts_in_message":[],"_revision_number":1},{"id":"55f62c6b17699d9bf0585d1cff7ab9ffd34b3639","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-06-30 17:02:25.000000000","message":"Patch Set 1:\n\nrecheck","accounts_in_message":[],"_revision_number":1},{"id":"6043f744a775170d6c34cff7d48c88047fda6d80","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-30 18:56:26.000000000","message":"Patch Set 1:\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/7e7635513eb6479aa36ffcc198d1f7ab : FAILURE in 7m 22s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/5e8c7afc092f44b18a96c9b863f7b456 : TIMED_OUT in 1h 47m 35s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/e6e50de9c83442d8a0089d6a26a3fdb4 : FAILURE in 5m 35s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/c3748d4c5d924405946face539d063ad : FAILURE in 6m 23s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/44d71e71bc914be2a3862e7f7c56c3f9 : FAILURE in 8m 22s\n- barbican-tox-functional https://zuul.opendev.org/t/openstack/build/698610ef8e2e436fbc86bcf4723f7639 : FAILURE in 41m 01s\n- barbican-dogtag-tox-functional https://zuul.opendev.org/t/openstack/build/46651e5fbfb5489c94339fd7d0225784 : POST_FAILURE in 39m 19s (non-voting)\n- barbican-vault-tox-functional https://zuul.opendev.org/t/openstack/build/088264178b0a47128f2a8ef1e17a3ac2 : FAILURE in 32m 05s (non-voting)\n- barbican-grenade https://zuul.opendev.org/t/openstack/build/4360422fcac549348459fea33e80ad4e : SUCCESS in 1h 03m 11s (non-voting)\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/0f5593d2d46e421686df1e06cbcab6cb : FAILURE in 19m 04s","accounts_in_message":[],"_revision_number":1},{"id":"5a8866d4d44d1330c0e77b3e2edff717d6792e71","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-06-30 19:17:26.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"44476bd487219c0239c4021d6dcaa059fabe71ec","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-06-30 20:16:51.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- requirements-check https://zuul.opendev.org/t/openstack/build/2d30e4c028e44b9da6435ed7ae6a40ff : SUCCESS in 2m 50s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2f67c07dd2e74d3abf59a51cbafb3858 : SUCCESS in 7m 32s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/625c4e0a585a464e8c51026f7a1a1233 : SUCCESS in 5m 03s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/af78ca379f944c7595922c998417798d : SUCCESS in 5m 54s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/ff0e52490ec94f408398bce21dc275f8 : SUCCESS in 9m 09s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/652c3ff7073b489cb5b6570017c00028 : SUCCESS in 9m 44s\n- barbican-tox-functional https://zuul.opendev.org/t/openstack/build/39bae862c52a4c7ea118833e0726dec5 : FAILURE in 41m 23s\n- barbican-dogtag-tox-functional https://zuul.opendev.org/t/openstack/build/ec7a1d7fca0f477e9da13ba9e6268770 : POST_FAILURE in 43m 08s (non-voting)\n- barbican-vault-tox-functional https://zuul.opendev.org/t/openstack/build/7064334c471e44138f9297332ecd4342 : FAILURE in 39m 42s (non-voting)\n- barbican-grenade https://zuul.opendev.org/t/openstack/build/283eba9546364c29bbf397f2e570b56e : SUCCESS in 57m 07s (non-voting)\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/c5ed9f35fce94278824cae0fc99fda09 : FAILURE in 45m 59s","accounts_in_message":[],"_revision_number":2},{"id":"2856f0e352bcbbe3f4d31fdbda0674fa2c9a518a","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-06-30 22:11:53.000000000","message":"Topic set to implement-scope-types-and-default-roles","accounts_in_message":[],"_revision_number":2},{"id":"d4c46cf7620b8ed02f27ba9425d9b799147e5f2b","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-07-02 01:43:17.000000000","message":"Patch Set 2:\n\nrecheck","accounts_in_message":[],"_revision_number":2},{"id":"a1c7642e13788d144f9fd677b5107ce095482a3d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-07-02 02:50:06.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- requirements-check https://zuul.opendev.org/t/openstack/build/3068008dd57a47429f16af2f777ed6b4 : SUCCESS in 8m 15s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2650460598b148368faf2521cbc55a48 : SUCCESS in 6m 29s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/71d4a10b83b44ea183f455d5dc735e15 : SUCCESS in 10m 03s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/0febdf33221b491ca3e09a463a712294 : SUCCESS in 7m 00s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/8727aa2cdbc149c3aec2e6c73bbb49dd : SUCCESS in 6m 28s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/4b71be8085c44993a75da198556971e4 : SUCCESS in 7m 21s\n- barbican-tox-functional https://zuul.opendev.org/t/openstack/build/eb3034800a04464199b60c21e225d39a : SUCCESS in 34m 09s\n- barbican-dogtag-tox-functional https://zuul.opendev.org/t/openstack/build/510a8d91dee5423c8f9b59c5933c3a5d : POST_FAILURE in 37m 51s (non-voting)\n- barbican-vault-tox-functional https://zuul.opendev.org/t/openstack/build/1676684f34ea472b9e2d9cdf1890544b : SUCCESS in 34m 07s (non-voting)\n- barbican-grenade https://zuul.opendev.org/t/openstack/build/5686f97cc3b64e42b535d36c40d2059c : SUCCESS in 1h 03m 40s (non-voting)\n- octavia-v2-dsvm-tls-barbican https://zuul.opendev.org/t/openstack/build/8363b4773b62465a902b75b4bd4b174c : SUCCESS in 1h 06m 15s","accounts_in_message":[],"_revision_number":2},{"id":"449cc29038b9c3404ddb74428293494308a562b4","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-03-19 12:37:34.000000000","message":"Patch Set 2:\n\nThis should be safe to abandon now, right?","accounts_in_message":[],"_revision_number":2},{"id":"506b2c685404680f279932d85b49986d1364fb50","tag":"autogenerated:gerrit:abandon","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2021-11-22 21:36:40.000000000","message":"Abandoned","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"608b5f32c6872727b498a37064e4cc5beaf83a4e","revisions":{"55521b44d675668d2a0a9fc82dcda67f5f8b0842":{"kind":"REWORK","_number":1,"created":"2020-06-29 22:05:00.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/738521/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/barbican","ref":"refs/changes/21/738521/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/barbican refs/changes/21/738521/1"}}},"commit":{"parents":[{"commit":"df194df8169250eea267474b145e11e318933b25","subject":"Fix PDF build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/df194df8169250eea267474b145e11e318933b25"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-06-29 22:03:22.000000000","tz":-300},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-06-29 22:03:22.000000000","tz":-300},"subject":"WIP: Implement scope_types and default roles for secrets","message":"WIP: Implement scope_types and default roles for secrets\n\nThis commit introduces policies that align with the defaults in keystone\nand uses scope checking. This makes barbican\u0027s policy enforcement\nconsistent with the overall direction of policy across OpenStack. Added\nchecks for scope types simplify policy check strings and offload some\nresponsibility to oslo.policy.\n\nDepends-On: https://review.opendev.org/#/c/738520/\nChange-Id: Ic1a7e77061314edcd7dcd40aaa5a7c41100bf1dc\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/55521b44d675668d2a0a9fc82dcda67f5f8b0842"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/55521b44d675668d2a0a9fc82dcda67f5f8b0842"}]},"branch":"refs/heads/master"},"608b5f32c6872727b498a37064e4cc5beaf83a4e":{"kind":"REWORK","_number":2,"created":"2020-06-30 19:17:26.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/21/738521/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/barbican","ref":"refs/changes/21/738521/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/barbican refs/changes/21/738521/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/barbican refs/changes/21/738521/2"}}},"commit":{"parents":[{"commit":"df194df8169250eea267474b145e11e318933b25","subject":"Fix PDF build","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/df194df8169250eea267474b145e11e318933b25"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-06-29 22:03:22.000000000","tz":-300},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-06-30 19:17:16.000000000","tz":-300},"subject":"WIP: Implement scope_types and default roles for secrets","message":"WIP: Implement scope_types and default roles for secrets\n\nThis commit introduces policies that align with the defaults in keystone\nand uses scope checking. This makes barbican\u0027s policy enforcement\nconsistent with the overall direction of policy across OpenStack. Added\nchecks for scope types simplify policy check strings and offload some\nresponsibility to oslo.policy.\n\nDepends-On: https://review.opendev.org/#/c/738520/\nChange-Id: Ic1a7e77061314edcd7dcd40aaa5a7c41100bf1dc\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/608b5f32c6872727b498a37064e4cc5beaf83a4e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/barbican/commit/608b5f32c6872727b498a37064e4cc5beaf83a4e"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}