)]}'
{"id":"openstack%2Fdesignate~763875","triplet_id":"openstack%2Fdesignate~master~I064a5021282be247ee7339a47871e3dba08ab2fa","project":"openstack/designate","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"I064a5021282be247ee7339a47871e3dba08ab2fa","subject":"Implement secure RBAC for recordsets","status":"MERGED","created":"2020-11-23 22:49:51.000000000","updated":"2020-11-27 00:46:43.000000000","submitted":"2020-11-27 00:46:43.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"763875-secure-rbac","meta_rev_id":"11d731ae43346ee23ab95a94f7c1e89db7ace83c","_number":763875,"virtual_id_number":763875,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-11-27 00:46:42.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"all":[{"value":2,"date":"2020-11-24 13:21:55.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-11-26 22:36:10.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-11-26 22:36:10.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-24 00:11:30.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-24 00:50:53.000000000","updated_by":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"reviewer":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"state":"REVIEWER"},{"updated":"2020-11-26 22:36:10.000000000","updated_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"reviewer":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"state":"REVIEWER"}],"messages":[{"id":"37b51c59904645b16993407874150b6e048fcd06","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:49:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"a5c922c091c73adbb506c0515bb356da7c03aaed","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:53:33.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"a8f9262b420353cf8f825aa60cb2bf827a4cafde","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 00:11:30.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/927bc84904b645aeb55dbbcce1e7723e : SUCCESS in 56m 02s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/916582f08b9c459dbfd1a3b72c76169e : SUCCESS in 41m 29s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/5715cfa1703d4c359560df506b5886ee : SUCCESS in 1h 00m 11s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/a914fcfb3eb34b9c9e754ff6ccfed2fb : SUCCESS in 44m 52s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/fe5f06f04bf74105974782efd13a1ee6 : SUCCESS in 45m 20s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f104d53cdd2149a8b591208d32b2f83e : SUCCESS in 5m 36s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/017b49e6ad3e4b429963f9e5607970f0 : FAILURE in 3m 47s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f33b5a9b4b994194becffc70e8a9d295 : SUCCESS in 3m 35s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/a61b3ab6c1994fec83b93a51c7fc5b2f : SUCCESS in 4m 28s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/c27f52a26cdc44b3bfdc1b16430bfd62 : SUCCESS in 4m 59s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/af5755893ee54e668f667294df48b900 : SUCCESS in 5m 17s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f3adecbe97374ea5a30a006dafa3c9cc : SUCCESS in 16m 01s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/5914200602df4b6d999025ad5618c2aa : SUCCESS in 40m 23s","accounts_in_message":[],"_revision_number":1},{"id":"81f9e4d32aa0725c9c135a61a67559b5895856a1","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 00:50:53.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"505de9e999e558ff7fa2bca5a0ea1a229b499c38","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 01:04:14.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"230a230f046868983010737bb30f6e96e623587d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 02:10:34.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/6b5ed4a0f4464f4ba3804fda4325ea38 : SUCCESS in 37m 51s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/2939a86377534ebbb850ca0118396a12 : SUCCESS in 41m 30s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/eb87bc760aa24a678a41026b67dd5eb5 : SUCCESS in 59m 20s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/7f4e7789acbe441ab0d5a36d30c5b7d9 : SUCCESS in 38m 15s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/6668d02557b24bf78da23102fd24357d : SUCCESS in 44m 52s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/0710338b06f445569fdd610c78b83270 : SUCCESS in 5m 06s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/1a36ef56599a4d668f8b7afbd1f448f8 : SUCCESS in 5m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/03d9f9e256804f478b852578d255a0ce : SUCCESS in 4m 37s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/38d4cc79c8434a268f556e6d9f087a24 : SUCCESS in 4m 35s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/7f9ed13567924cd9a757a9f824c63a81 : SUCCESS in 5m 08s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/9d713c24935e4fe388cc2d5387c2c43f : SUCCESS in 5m 14s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9b7c9906b31e41029b7311b33a8f55dc : SUCCESS in 7m 40s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/9edeaaae585945c7a57422b06f53c11f : SUCCESS in 41m 57s","accounts_in_message":[],"_revision_number":3},{"id":"121033433fa728dc65784924be0b16edddf5b955","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:11:24.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"cc95beb127d1fe7d0fde5fc79584a6312b15a748","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 05:04:03.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/82ccff1f75374912b59741aa0881efbf : SUCCESS in 38m 27s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/7f680671c9b24f05b9e2bb16fc6f608a : SUCCESS in 32m 06s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/3feff6fadf394ceeb78d0d9decd72bfa : SUCCESS in 48m 14s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/0aeb483d50484cf18c9d688716ff8601 : SUCCESS in 30m 58s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/ab22650be83449a8adf502020cf68805 : SUCCESS in 38m 44s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/c7fdef85a9a94ce7bc100ee1776da5d0 : SUCCESS in 4m 53s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/b280f60ad77d4e78a714633f3499b58e : SUCCESS in 5m 19s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/492eeee9cf444ff5a58c984d334c01e9 : SUCCESS in 3m 43s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/2d3b5968b0534fe3a292138f465d161a : SUCCESS in 5m 10s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4621ab9cf6de4178a08e1c84284bcdee : SUCCESS in 4m 08s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/aae95ab478ea475cadfd97bf99932309 : SUCCESS in 5m 18s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/12ee582a81de4d8e8133444fb6b75059 : SUCCESS in 7m 38s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/eb02d678df9e4a0b8d2771186d570ec9 : SUCCESS in 26m 23s","accounts_in_message":[],"_revision_number":4},{"id":"1e5b1beba5335a7a1dca9bd5a2f9e99c85238ece","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 13:21:55.000000000","message":"Patch Set 4: Code-Review+2\n\nThanks!","accounts_in_message":[],"_revision_number":4},{"id":"bd3b2075bda886d54e82447b7561a574f7000c51","author":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"date":"2020-11-26 22:36:10.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"da9a5aa9e6da4e7a85620ec2fd9e681cecbf95a4","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-26 23:34:36.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"56597d615e6a1424c735145ee8e879a6458f4d83","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:46:42.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/f8e83372a3fe42fe81cfcea1e41821ad : SUCCESS in 33m 22s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/10864778c28e408e8ebc0044fb2f978a : SUCCESS in 32m 25s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/9700604f4ef34c4980a8cf01494ee77b : SUCCESS in 51m 04s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/eca020ba69c44344a316e93fe1a74f1e : SUCCESS in 34m 05s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/84fd326fd4e44994b0103a393aee0fd5 : SUCCESS in 35m 49s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/4556877719af44918a9c4777b3359305 : SUCCESS in 4m 17s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9856836fb22e409eb7b73ae1024030a5 : SUCCESS in 3m 48s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/50cc0bb3627340b2b9bf3e05b6e47db5 : SUCCESS in 5m 05s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/371d2ebfbc9b4b70b2814ed246da8d6e : SUCCESS in 4m 24s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/78b34958e1314a61b1d24a21f1643aeb : SUCCESS in 6m 57s","accounts_in_message":[],"_revision_number":4},{"id":"11d731ae43346ee23ab95a94f7c1e89db7ace83c","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:46:43.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"5402e40319559a70c9c70a50fa0851d20f14ac4d","revisions":{"4451a2a11f0f5b41930058e758d7c5aa78736db4":{"kind":"REWORK","_number":1,"created":"2020-11-23 22:49:51.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/75/763875/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/75/763875/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/75/763875/1"}}},"commit":{"parents":[{"commit":"9bfa8096f8a5c52047698ee90ae3c9ee1048178a","subject":"Implement secure RBAC for records","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/9bfa8096f8a5c52047698ee90ae3c9ee1048178a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:35:35.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:37:50.000000000","tz":0},"subject":"Implement secure RBAC for recordsets","message":"Implement secure RBAC for recordsets\n\nThis commit updates the policies for recordsets to understand scope checking\nand account for a read-only role. This is part of a broader series of changes\nacross OpenStack to provide a consistent RBAC experience and improve security.\n\nChange-Id: I064a5021282be247ee7339a47871e3dba08ab2fa\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/4451a2a11f0f5b41930058e758d7c5aa78736db4"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/4451a2a11f0f5b41930058e758d7c5aa78736db4"}]},"branch":"refs/heads/master"},"1829dd0956565aca0f4ffeeb9e8b72495e0c5a61":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 00:50:53.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/75/763875/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/75/763875/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/75/763875/2"}}},"commit":{"parents":[{"commit":"9b36639e536ac3b9ecaec580ba97297a10d13e6a","subject":"Implement secure RBAC for records","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/9b36639e536ac3b9ecaec580ba97297a10d13e6a"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:35:35.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 00:49:28.000000000","tz":-420},"subject":"Implement secure RBAC for recordsets","message":"Implement secure RBAC for recordsets\n\nThis commit updates the policies for recordsets to understand scope checking\nand account for a read-only role. This is part of a broader series of changes\nacross OpenStack to provide a consistent RBAC experience and improve security.\n\nChange-Id: I064a5021282be247ee7339a47871e3dba08ab2fa\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/1829dd0956565aca0f4ffeeb9e8b72495e0c5a61"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/1829dd0956565aca0f4ffeeb9e8b72495e0c5a61"}]},"branch":"refs/heads/master"},"f164d914382adfb5279675b12e47e32b244ab8ac":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2020-11-24 01:04:14.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/75/763875/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/75/763875/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/75/763875/3"}}},"commit":{"parents":[{"commit":"4b453e8be59bee6c3a9a70b72a70032345462c0e","subject":"Implement secure RBAC for records","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/4b453e8be59bee6c3a9a70b72a70032345462c0e"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:35:35.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 01:03:18.000000000","tz":-420},"subject":"Implement secure RBAC for recordsets","message":"Implement secure RBAC for recordsets\n\nThis commit updates the policies for recordsets to understand scope\nchecking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC\nexperience and improve security.\n\nChange-Id: I064a5021282be247ee7339a47871e3dba08ab2fa\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/f164d914382adfb5279675b12e47e32b244ab8ac"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/f164d914382adfb5279675b12e47e32b244ab8ac"}]},"branch":"refs/heads/master"},"5402e40319559a70c9c70a50fa0851d20f14ac4d":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2020-11-24 04:11:24.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/75/763875/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/75/763875/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/75/763875/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/75/763875/4"}}},"commit":{"parents":[{"commit":"e9ecd1b5fedd0fed92c61c7fbcba1de5b9f28eb3","subject":"Implement secure RBAC for records","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e9ecd1b5fedd0fed92c61c7fbcba1de5b9f28eb3"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:35:35.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:08:05.000000000","tz":0},"subject":"Implement secure RBAC for recordsets","message":"Implement secure RBAC for recordsets\n\nThis commit updates the policies for recordsets to understand scope\nchecking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC\nexperience and improve security.\n\nChange-Id: I064a5021282be247ee7339a47871e3dba08ab2fa\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5402e40319559a70c9c70a50fa0851d20f14ac4d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5402e40319559a70c9c70a50fa0851d20f14ac4d"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}