)]}'
{"id":"openstack%2Fdesignate-tempest-plugin~970666","triplet_id":"openstack%2Fdesignate-tempest-plugin~master~Ief8f5a0da5137e3d82429f303f00c6df9c765623","project":"openstack/designate-tempest-plugin","branch":"master","topic":"bug/1926572","attention_set":{},"removed_from_attention_set":{"31664":{"account":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"last_update":"2025-12-12 16:34:30.000000000","reason":"\u003cGERRIT_ACCOUNT_31664\u003e replied on the change","reason_account":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"}}},"hashtags":[],"change_id":"Ief8f5a0da5137e3d82429f303f00c6df9c765623","subject":"Update tests for zone transfer request access control fix","status":"NEW","created":"2025-12-11 18:19:00.000000000","updated":"2025-12-17 16:11:38.000000000","submit_type":"MERGE_IF_NECESSARY","mergeable":true,"submittable":false,"total_comment_count":1,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"726c2d25e85232b104697ef4dd1fc579c85b5e34","_number":970666,"virtual_id_number":970666,"owner":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"actions":{},"labels":{"Verified":{"recommended":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:check","value":1,"date":"2025-12-17 16:11:38.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2025-12-11 19:39:28.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"}],"messages":[{"id":"b6058050f93988df88bde34d7fde299eb7f71e9e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"date":"2025-12-11 18:19:00.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"78b6db66f9174dcbc386ec6cf40223c26c256bf3","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-12-11 19:39:28.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/0a86175fcd294398883fbc6d70c75e71\n\n- designate-bind9-core https://zuul.opendev.org/t/openstack/build/3c17a183ffcc4c78911a5cffd3f4ab5a : FAILURE in 53m 30s\n- designate-bind9-with-keystone-default-roles https://zuul.opendev.org/t/openstack/build/a6b41183d9aa47dbb83617533a2b1baa : FAILURE in 45m 37s\n- designate-pdns4-core https://zuul.opendev.org/t/openstack/build/e8380e4caae740c1b5bf6b3417468c30 : FAILURE in 39m 05s\n- designate-bind9-multipool https://zuul.opendev.org/t/openstack/build/3d9721f27d4e486d9143c055ec836dde : SUCCESS in 37m 17s\n- designate-grenade-bind9 https://zuul.opendev.org/t/openstack/build/b5c09985bbf8406cb930fb258d482504 : FAILURE in 1h 12m 24s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/319b567062824b6d9e61442e4a1eeb15 : FAILURE in 52m 02s\n- designate-grenade-bind9-skip-level https://zuul.opendev.org/t/openstack/build/c4f5e1c796fe46be8c4557097d2f9673 : FAILURE in 1h 11m 26s\n- designate-grenade-pdns4-skip-level https://zuul.opendev.org/t/openstack/build/95dcec73205b48f3b09ce0c0ac6b1d9b : FAILURE in 57m 52s\n- designate-bind9-core-catalog-zones https://zuul.opendev.org/t/openstack/build/77e5902560ba41458f86e946ea1f9a9f : FAILURE in 50m 12s (non-voting)\n- designate-only-ipv6-pdns4 https://zuul.opendev.org/t/openstack/build/e60efb0283cc4848bad794a26103324a : FAILURE in 43m 30s\n- designate-only-ipv6-bind9 https://zuul.opendev.org/t/openstack/build/0231b2729f9c40e99bb8d21bc27fa529 : FAILURE in 47m 05s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/c2c64371c8924da0a8ac03baab5319c9 : SUCCESS in 2m 39s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/322460808ef94d2db75653e5b4dc82e5 : SUCCESS in 2m 36s\n- designate-bind9-stable-2025-2 https://zuul.opendev.org/t/openstack/build/3f849aa50b6e46d0bcf2a260f3e6aec7 : FAILURE in 35m 54s\n- designate-bind9-stable-2025-1 https://zuul.opendev.org/t/openstack/build/10fd4d74fd4e42ff93d46b8c1266d1fb : FAILURE in 37m 36s\n- designate-bind9-stable-2024-2 https://zuul.opendev.org/t/openstack/build/f3983c43f7a64fd88ea8002d8358d6f4 : FAILURE in 49m 08s\n- designate-bind9-multipool-stable-2025-2 https://zuul.opendev.org/t/openstack/build/2cc9e57944e14977b8fb6e52b3910e93 : SUCCESS in 14m 23s\n- designate-bind9-multipool-stable-2025-1 https://zuul.opendev.org/t/openstack/build/c0d140bbe120423fbc41937da6d58242 : SUCCESS in 14m 27s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/688ba5e3b00948328d4911d588115358 : SUCCESS in 31m 07s","accounts_in_message":[],"_revision_number":1},{"id":"399309e801504c8d83fe8290082eb8023e6ab067","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"date":"2025-12-12 14:17:12.000000000","message":"Uploaded patch set 2.\n\nOutdated Votes:\n* Verified-1\n","accounts_in_message":[],"_revision_number":2},{"id":"f30056ccb8fd7111d9bb2c0f6b10fec2fcb29857","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-12-12 15:40:56.000000000","message":"Patch Set 2: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\nand https://docs.openstack.org/project-team-guide/testing.html#how-to-handle-test-failures\n\nhttps://zuul.opendev.org/t/openstack/buildset/496313a482274f0495f500c6e4e0f1ae\n\n- designate-bind9-core https://zuul.opendev.org/t/openstack/build/f998863266e3469a892e08e879320dc8 : SUCCESS in 48m 54s\n- designate-bind9-with-keystone-default-roles https://zuul.opendev.org/t/openstack/build/c543f7cfef2c43448e7316ef9f752ccb : SUCCESS in 43m 06s\n- designate-pdns4-core https://zuul.opendev.org/t/openstack/build/9f182cad4956471d87803a0db2d6d77f : SUCCESS in 48m 01s\n- designate-bind9-multipool https://zuul.opendev.org/t/openstack/build/ea0521633ecf4e1b9e5e3e6fee209252 : SUCCESS in 33m 51s\n- designate-grenade-bind9 https://zuul.opendev.org/t/openstack/build/452b3fb254fd456ba570f3bbff54d2b9 : SUCCESS in 1h 17m 13s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/501205372b0c4bd88dc520d5e4bff561 : FAILURE in 1h 12m 19s\n- designate-grenade-bind9-skip-level https://zuul.opendev.org/t/openstack/build/84111412be884ff8a66f02c089a9c9f4 : SUCCESS in 1h 10m 28s\n- designate-grenade-pdns4-skip-level https://zuul.opendev.org/t/openstack/build/795a930fc6de4ab9984d979c7bb3e83c : SUCCESS in 1h 06m 30s\n- designate-bind9-core-catalog-zones https://zuul.opendev.org/t/openstack/build/ecd9d51d90dd4aceb37d6177b1cff90a : SUCCESS in 44m 35s (non-voting)\n- designate-only-ipv6-pdns4 https://zuul.opendev.org/t/openstack/build/7648f06116294a4f835b4e67b6656a9f : SUCCESS in 45m 24s\n- designate-only-ipv6-bind9 https://zuul.opendev.org/t/openstack/build/ad6b93a6a47c4ffd9963e56ca72f50b2 : SUCCESS in 49m 28s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/e437a81be29e4da5a675f95772d09308 : SUCCESS in 3m 07s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/badefe3d08cb4510925dff6b8dfbc38c : SUCCESS in 3m 02s\n- designate-bind9-stable-2025-2 https://zuul.opendev.org/t/openstack/build/440f83361dd0439a94eb475f43a3eb7a : SUCCESS in 44m 33s\n- designate-bind9-stable-2025-1 https://zuul.opendev.org/t/openstack/build/eedf91c2a1f14c2995e3a1a6bf28097a : SUCCESS in 40m 04s\n- designate-bind9-stable-2024-2 https://zuul.opendev.org/t/openstack/build/07a2dceea97245f0b97f20077e2775eb : SUCCESS in 46m 56s\n- designate-bind9-multipool-stable-2025-2 https://zuul.opendev.org/t/openstack/build/932a09beeabd46129a63f4ac55ea000d : SUCCESS in 17m 04s\n- designate-bind9-multipool-stable-2025-1 https://zuul.opendev.org/t/openstack/build/70a568147f00499ba9e2d80ec5563dec : SUCCESS in 32m 52s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/f0c1ae3b80f0460a8ebbc5cf56a7dd26 : SUCCESS in 37m 04s","accounts_in_message":[],"_revision_number":2},{"id":"c45c301ff29469e8e7cc9f162d6d998e80a3f38e","author":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"date":"2025-12-12 16:34:30.000000000","message":"Patch Set 2:\n\n(1 comment)","accounts_in_message":[],"_revision_number":2},{"id":"aafe1cc688f316d3951066f97ae3f995bbd59366","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-12-12 17:57:55.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/350f6185b4ea48dea910a00182c28d03\n\n- designate-bind9-core https://zuul.opendev.org/t/openstack/build/ec0957939dde4861805b87d416ab2bfc : SUCCESS in 56m 07s\n- designate-bind9-with-keystone-default-roles https://zuul.opendev.org/t/openstack/build/96e681b7445142229b2253834400e68c : SUCCESS in 46m 12s\n- designate-pdns4-core https://zuul.opendev.org/t/openstack/build/a584c4da88f342ab98c16f6cb17e6bfa : SUCCESS in 56m 03s\n- designate-bind9-multipool https://zuul.opendev.org/t/openstack/build/500a474335b4463db0702279b982c22d : SUCCESS in 33m 30s\n- designate-grenade-bind9 https://zuul.opendev.org/t/openstack/build/d334a2c077c3485184678578720e24ee : SUCCESS in 53m 54s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/2ec127c7690b478b87c23302f33e0547 : SUCCESS in 1h 14m 50s\n- designate-grenade-bind9-skip-level https://zuul.opendev.org/t/openstack/build/5ca6b2d8d2c342e7a1383746fa7c212e : SUCCESS in 1h 07m 07s\n- designate-grenade-pdns4-skip-level https://zuul.opendev.org/t/openstack/build/48206fa4df8145ee8684fa61718acaa1 : SUCCESS in 1h 17m 41s\n- designate-bind9-core-catalog-zones https://zuul.opendev.org/t/openstack/build/bd7ddf83e52640659eedc8798b5ad347 : SUCCESS in 43m 15s (non-voting)\n- designate-only-ipv6-pdns4 https://zuul.opendev.org/t/openstack/build/8c5def415ffd47fa8ce0fecb5dacd7b0 : SUCCESS in 44m 17s\n- designate-only-ipv6-bind9 https://zuul.opendev.org/t/openstack/build/8284cd484a1044c8bf1d7be368ea1b24 : SUCCESS in 43m 57s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9a2872e4a5104de5bd91078733cdf169 : SUCCESS in 2m 12s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/eecee962c9684d9b880aed534bf01a4b : SUCCESS in 2m 53s\n- designate-bind9-stable-2025-2 https://zuul.opendev.org/t/openstack/build/05821eb7a6e84af29def08b0244c36f8 : SUCCESS in 42m 11s\n- designate-bind9-stable-2025-1 https://zuul.opendev.org/t/openstack/build/b7502d481ed941ed906d9c920cd0fb51 : SUCCESS in 44m 21s\n- designate-bind9-stable-2024-2 https://zuul.opendev.org/t/openstack/build/ad2398bbde114fd3bdeeca45cbd298a8 : SUCCESS in 45m 50s\n- designate-bind9-multipool-stable-2025-2 https://zuul.opendev.org/t/openstack/build/7d76aac1beac4ca6980b044b5be7ab80 : SUCCESS in 20m 44s\n- designate-bind9-multipool-stable-2025-1 https://zuul.opendev.org/t/openstack/build/4812e3ffa69b484587fa3fa35126fe1c : SUCCESS in 15m 54s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/53d0893b012c41a1920950beb51bcf7f : SUCCESS in 31m 05s","accounts_in_message":[],"_revision_number":2},{"id":"604d3f6f0ea068439a17718b510d972a7094338a","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"date":"2025-12-17 15:00:35.000000000","message":"Uploaded patch set 3.\n\nOutdated Votes:\n* Verified+1\n","accounts_in_message":[],"_revision_number":3},{"id":"726c2d25e85232b104697ef4dd1fc579c85b5e34","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2025-12-17 16:11:38.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\nhttps://zuul.opendev.org/t/openstack/buildset/5b2bd8a489c64082827143081cb6528b\n\n- designate-bind9-core https://zuul.opendev.org/t/openstack/build/248ce2d48f9041d494c90395d580761c : SUCCESS in 52m 54s\n- designate-bind9-with-keystone-default-roles https://zuul.opendev.org/t/openstack/build/0202eb7d833c49908d7a292993a846d2 : SUCCESS in 43m 34s\n- designate-pdns4-core https://zuul.opendev.org/t/openstack/build/eb3c1890e1fa475595631a1e939d4c33 : SUCCESS in 42m 06s\n- designate-bind9-multipool https://zuul.opendev.org/t/openstack/build/8a404499daf44e009eb0bdf8fc5ab977 : SUCCESS in 33m 35s\n- designate-grenade-bind9 https://zuul.opendev.org/t/openstack/build/aa6ce744ff6a4257863cec82e5c9c444 : SUCCESS in 53m 23s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/c19eadd9b60947eabe9945318470bbbf : SUCCESS in 1h 05m 22s\n- designate-grenade-bind9-skip-level https://zuul.opendev.org/t/openstack/build/1f718fce035a4230823e4bd254db1cfe : SUCCESS in 55m 43s\n- designate-grenade-pdns4-skip-level https://zuul.opendev.org/t/openstack/build/525673e91546490b923316bad1a3f777 : SUCCESS in 1h 05m 44s\n- designate-bind9-core-catalog-zones https://zuul.opendev.org/t/openstack/build/6e9a86f32ee04760838b5a1df075f1d9 : SUCCESS in 42m 53s (non-voting)\n- designate-only-ipv6-pdns4 https://zuul.opendev.org/t/openstack/build/2f798c52e2674cf898d7f14945bf2511 : SUCCESS in 47m 07s\n- designate-only-ipv6-bind9 https://zuul.opendev.org/t/openstack/build/f14f7d3b02b5400ca0a3c13b19557a19 : SUCCESS in 52m 08s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/37aafae0c7a94f7db23fbafeb7dd2211 : SUCCESS in 2m 38s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/2c1de504249a499a8bb68ac13537a465 : SUCCESS in 1m 41s\n- designate-bind9-stable-2025-2 https://zuul.opendev.org/t/openstack/build/294b54b0095849c2aa7a401214d3f7d5 : SUCCESS in 46m 28s\n- designate-bind9-stable-2025-1 https://zuul.opendev.org/t/openstack/build/b4e290578fa84c0ba555240b36f0e155 : SUCCESS in 42m 29s\n- designate-bind9-stable-2024-2 https://zuul.opendev.org/t/openstack/build/8d14d9247aec42b68deb271b2e79d7ff : SUCCESS in 42m 00s\n- designate-bind9-multipool-stable-2025-2 https://zuul.opendev.org/t/openstack/build/1c039bb8e0494139a0069297d7c99614 : SUCCESS in 35m 21s\n- designate-bind9-multipool-stable-2025-1 https://zuul.opendev.org/t/openstack/build/4858c89212534262a403ab3896aeb687 : SUCCESS in 32m 34s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/c27ca7e0d978480a8d8198922385ba8f : SUCCESS in 33m 12s","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"e7b1cd5a3b6304dc189c801c0deb9fff3e6a4d88","revisions":{"43be08f227554fbf73ff624e9f7aad465983d50f":{"kind":"REWORK","_number":1,"created":"2025-12-11 18:19:00.000000000","uploader":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"ref":"refs/changes/66/970666/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate-tempest-plugin","ref":"refs/changes/66/970666/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/1"}}},"commit":{"parents":[{"commit":"88fc51f6327a4b8ac50078380d0fc91eca7eb449","subject":"Merge \"Update stable branch jobs\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/88fc51f6327a4b8ac50078380d0fc91eca7eb449"}]}],"author":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-11 18:11:52.000000000","tz":-180},"committer":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-11 18:11:52.000000000","tz":-180},"subject":"Update tests for zone transfer request access control fix","message":"Update tests for zone transfer request access control fix\n\nThis is a complementary patch to the Designate security fix for bug\n1926572, which adds proper tenant filtering to zone transfer requests\nbefore the policy check.\n\nThe security fix ensures that administrators cannot view zone transfer\nrequests from other projects without using the --all-projects flag,\nmaintaining proper project isolation.\n\nChanges to tests:\n\n1. test_zone_transfer_target_project: Updated expected exception from\n   Forbidden (403) to NotFound (404) when the alt tenant attempts to\n   accept a transfer request targeted to a different project. With the\n   security fix, users who are not the owner, target, or viewing an\n   open transfer cannot see the transfer request at all (404) rather\n   than being denied permission (403).\n\n2. test_show_transfer_request_as_target: Removed os_admin from the\n   expected_allowed list in the non-scope-enforced case. Administrators\n   without the --all-projects flag can no longer view transfer requests\n   from other projects, even if they have a target_project_id set,\n   unless they are explicitly the target project.\n\nThese changes ensure the tempest tests align with the new secure\nbehavior where project isolation is properly enforced for zone\ntransfer requests.\n\nRelated-Bug: #1926572\nGenerated-By: Claude Code 4.5 Sonnet\nChange-Id: Ief8f5a0da5137e3d82429f303f00c6df9c765623\nSigned-off-by: Omer \u003coschwart@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/43be08f227554fbf73ff624e9f7aad465983d50f"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/43be08f227554fbf73ff624e9f7aad465983d50f"}]},"branch":"refs/heads/master"},"82af944ed54d820c137bd99e1ea322ed718842fa":{"kind":"REWORK","_number":2,"created":"2025-12-12 14:17:12.000000000","uploader":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"ref":"refs/changes/66/970666/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate-tempest-plugin","ref":"refs/changes/66/970666/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/2"}}},"commit":{"parents":[{"commit":"88fc51f6327a4b8ac50078380d0fc91eca7eb449","subject":"Merge \"Update stable branch jobs\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/88fc51f6327a4b8ac50078380d0fc91eca7eb449"}]}],"author":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-11 18:11:52.000000000","tz":-180},"committer":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-12 14:14:20.000000000","tz":-180},"subject":"Update tests for zone transfer request access control fix","message":"Update tests for zone transfer request access control fix\n\nThis is a complementary patch to the Designate security fix for bug\n1926572, which adds proper tenant filtering to zone transfer requests\nbefore the policy check.\n\nI have added a skip decorator because I have a dependency loop between\nthe designate repositories. I am removing it in the next designate\ntempest plugin patch.\n\nThe security fix ensures that administrators cannot view zone transfer\nrequests from other projects without using the --all-projects flag,\nmaintaining proper project isolation.\n\nChanges to tests:\n\n1. test_zone_transfer_target_project: Updated expected exception from\n   Forbidden (403) to NotFound (404) when the alt tenant attempts to\n   accept a transfer request targeted to a different project. With the\n   security fix, users who are not the owner, target, or viewing an\n   open transfer cannot see the transfer request at all (404) rather\n   than being denied permission (403).\n\n2. test_show_transfer_request_as_target: Removed os_admin from the\n   expected_allowed list in the non-scope-enforced case. Administrators\n   without the --all-projects flag can no longer view transfer requests\n   from other projects, even if they have a target_project_id set,\n   unless they are explicitly the target project.\n\nThese changes ensure the tempest tests align with the new secure\nbehavior where project isolation is properly enforced for zone\ntransfer requests.\n\nRelated-Bug: #1926572\nGenerated-By: Claude Code 4.5 Sonnet\nChange-Id: Ief8f5a0da5137e3d82429f303f00c6df9c765623\nSigned-off-by: Omer \u003coschwart@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/82af944ed54d820c137bd99e1ea322ed718842fa"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/82af944ed54d820c137bd99e1ea322ed718842fa"}]},"branch":"refs/heads/master"},"e7b1cd5a3b6304dc189c801c0deb9fff3e6a4d88":{"kind":"REWORK","_number":3,"created":"2025-12-17 15:00:35.000000000","uploader":{"_account_id":31664,"name":"Omer Schwartz","email":"oschwart@redhat.com","username":"oschwart"},"ref":"refs/changes/66/970666/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate-tempest-plugin","ref":"refs/changes/66/970666/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate-tempest-plugin refs/changes/66/970666/3"}}},"commit":{"parents":[{"commit":"88fc51f6327a4b8ac50078380d0fc91eca7eb449","subject":"Merge \"Update stable branch jobs\"","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/88fc51f6327a4b8ac50078380d0fc91eca7eb449"}]}],"author":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-11 18:11:52.000000000","tz":-180},"committer":{"name":"Omer","email":"oschwart@redhat.com","date":"2025-12-17 14:55:52.000000000","tz":-180},"subject":"Update tests for zone transfer request access control fix","message":"Update tests for zone transfer request access control fix\n\nThis is a complementary patch to the Designate security fix for bug\n1926572, which adds proper tenant filtering to zone transfer requests\nbefore the policy check.\n\nI have added a skip decorator because I have a dependency loop between\nthe designate repositories. I am removing it in the next designate\ntempest plugin patch.\n\nThe security fix ensures that administrators cannot view zone transfer\nrequests from other projects without using the --all-projects flag,\nmaintaining proper project isolation.\n\nChanges to tests:\n\n1. test_zone_transfer_target_project: Updated expected exception from\n   Forbidden (403) to NotFound (404) when the alt tenant attempts to\n   accept a transfer request targeted to a different project. With the\n   security fix, users who are not the owner, target, or viewing an\n   open transfer cannot see the transfer request at all (404) rather\n   than being denied permission (403).\n\n2. test_show_transfer_request_as_target: Removed os_admin from the\n   expected_allowed list in the non-scope-enforced case. Administrators\n   without the --all-projects flag can no longer view transfer requests\n   from other projects, even if they have a target_project_id set,\n   unless they are explicitly the target project.\n\nThese changes ensure the tempest tests align with the new secure\nbehavior where project isolation is properly enforced for zone\ntransfer requests.\n\nRelated-Bug: #1926572\nGenerated-By: Claude Code 4.5 Sonnet\nChange-Id: Ief8f5a0da5137e3d82429f303f00c6df9c765623\nSigned-off-by: Omer \u003coschwart@redhat.com\u003e\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/e7b1cd5a3b6304dc189c801c0deb9fff3e6a4d88"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate-tempest-plugin/commit/e7b1cd5a3b6304dc189c801c0deb9fff3e6a4d88"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"rule_name":"gerrit~DefaultSubmitRule","status":"OK","labels":[{"label":"Verified","status":"MAY","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"MAY"},{"label":"Workflow","status":"MAY"},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","description":"Verified in gate by CI","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Verified\u003dMAX AND -label:Verified\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Verified\u003dMAX","label:Verified\u003dMIN"],"atom_explanations":{"label:Verified\u003dMAX":"","label:Verified\u003dMIN":""}}},{"name":"Code-Review","description":"Code reviewed by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Code-Review\u003dMAX AND -label:Code-Review\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Code-Review\u003dMAX","label:Code-Review\u003dMIN"],"atom_explanations":{"label:Code-Review\u003dMAX":"","label:Code-Review\u003dMIN":""}}},{"name":"Review-Priority","description":"Review priority","status":"SATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"-label:Review-Priority\u003dMIN","fulfilled":true,"status":"PASS","passing_atoms":[],"failing_atoms":["label:Review-Priority\u003dMIN"],"atom_explanations":{"label:Review-Priority\u003dMIN":""}}},{"name":"Workflow","description":"Approved for gate by core reviewer","status":"UNSATISFIED","is_legacy":false,"submittability_expression_result":{"expression":"label:Workflow\u003dMAX AND -label:Workflow\u003dMIN","fulfilled":false,"status":"FAIL","passing_atoms":[],"failing_atoms":["label:Workflow\u003dMAX","label:Workflow\u003dMIN"],"atom_explanations":{"label:Workflow\u003dMAX":"","label:Workflow\u003dMIN":""}}}]}