)]}'
{"barbican/common/policies/containers.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"113fd83019dd38022f4c5d6c3e7286453422880e","unresolved":true,"context_lines":[{"line_number":28,"context_line":"    ),"},{"line_number":29,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":30,"context_line":"        name\u003d\u0027containers:get\u0027,"},{"line_number":31,"context_line":"        check_str\u003d\u0027rule:all_roles\u0027,"},{"line_number":32,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":33,"context_line":"        description\u003d\u0027Lists a projects containers.\u0027,"},{"line_number":34,"context_line":"        operations\u003d["}],"source_content_type":"text/x-python","patch_set":1,"id":"4cfeadd1_ea41c431","line":31,"updated":"2021-03-03 22:01:16.000000000","message":"Untested suggestion and notes:\n\n  SYSTEM_ADMIN \u003d \u0027role:admin and system_scope:all\u0027\n  PROJECT_MEMBER \u003d \u0027role:member and project_id:%(container.project_id)s\u0027\n  PROJECT_MEMBER \u003d \u0027role:member\u0027\n  check_str\u003d f\u0027({SYSTEM_ADMIN}) or ({PROJECT_MEMBER})\u0027\n\n\n  if context.system_scope:\n      # dealing with system-scoped token\n      containers \u003d db.get_containers()\n  elif context.project_id:\n      # dealing with project-scoped token\n      containers \u003d db.get_containers(project_id\u003dcontext.project_id)\n\n  GET /v1/containers?project_id\u003dfoo\n\n  filtered_containers \u003d []\n  for container in containers:\n      target \u003d dict(container) # assuming this contains a project_id\n      try:\n        policy.enforcer.enforce(\u0027containers:get\u0027, context, target)\n        filtered.append(containers)\n      except oslo.policy.policy.PolicyNotAuthorized:\n        continue","commit_id":"42f93135edf28b3d17a2047e89490e73f819a66c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"113fd83019dd38022f4c5d6c3e7286453422880e","unresolved":true,"context_lines":[{"line_number":40,"context_line":"    ),"},{"line_number":41,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":42,"context_line":"        name\u003d\u0027container:get\u0027,"},{"line_number":43,"context_line":"        check_str\u003d\u0027rule:container_project_all_roles\u0027,"},{"line_number":44,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":45,"context_line":"        description\u003d\u0027Retrieves a single container.\u0027,"},{"line_number":46,"context_line":"        operations\u003d["}],"source_content_type":"text/x-python","patch_set":1,"id":"31564e22_9c48ef8a","line":43,"updated":"2021-03-03 22:01:16.000000000","message":"Untested suggestion:\n\n  SYSTEM_ADMIN \u003d \u0027role:admin and system_scope:all\u0027\n  PROJECT_ADMIN \u003d \u0027role:admin and project_id:%(container.project_id)s\u0027\n  PROJECT_MEMBER \u003d \u0027role:member and project_id:%(container.project_id)s False:%(container.read_project_access)s\u0027\n  ACL_CHECK \u003d \u0027\"read\":%(target.container.read)s\u0027\n  check_str\u003d f\u0027({SYSTEM_ADMIN}) or ({PROJECT_ADMIN}) or ({PROJECT_MEMBER}) or ({ACL_CHECK})\u0027","commit_id":"42f93135edf28b3d17a2047e89490e73f819a66c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"113fd83019dd38022f4c5d6c3e7286453422880e","unresolved":true,"context_lines":[{"line_number":41,"context_line":"    policy.DocumentedRuleDefault("},{"line_number":42,"context_line":"        name\u003d\u0027container:get\u0027,"},{"line_number":43,"context_line":"        check_str\u003d\u0027rule:container_project_all_roles\u0027,"},{"line_number":44,"context_line":"        scope_types\u003d[\u0027project\u0027],"},{"line_number":45,"context_line":"        description\u003d\u0027Retrieves a single container.\u0027,"},{"line_number":46,"context_line":"        operations\u003d["},{"line_number":47,"context_line":"            {"}],"source_content_type":"text/x-python","patch_set":1,"id":"41af98fd_cb76c2ce","line":44,"updated":"2021-03-03 22:01:16.000000000","message":"Untested suggestion:\n\n  scope_types\u003d[\u0027system\u0027, \u0027project]","commit_id":"42f93135edf28b3d17a2047e89490e73f819a66c"}]}