)]}'
{"id":"openstack%2Fdesignate~763876","triplet_id":"openstack%2Fdesignate~master~I11c3d7ec8dc871338db7fcd3746e56516683ecd1","project":"openstack/designate","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"I11c3d7ec8dc871338db7fcd3746e56516683ecd1","subject":"Implement secure RBAC for service status","status":"MERGED","created":"2020-11-23 22:49:51.000000000","updated":"2020-11-27 00:46:56.000000000","submitted":"2020-11-27 00:46:56.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"763876-secure-rbac","meta_rev_id":"d7348c9adb6b2e4256cb63632010d29c8266dc92","_number":763876,"virtual_id_number":763876,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-11-27 00:46:48.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-11-26 22:36:25.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":2,"date":"2020-11-24 13:22:29.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-11-26 22:36:25.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-24 00:12:03.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-24 00:50:53.000000000","updated_by":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"reviewer":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"state":"REVIEWER"},{"updated":"2020-11-26 22:36:25.000000000","updated_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"reviewer":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"state":"REVIEWER"}],"messages":[{"id":"87e040377f336619e1c749b264f8361a7f7a5cc3","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:49:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"5a369ee866377bb4350c0d82c3b4242d3add9538","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:53:37.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"9108113161afd08269a5b3a71437cc8c4d2b7c27","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 00:12:03.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/8e91336a3c854c688a9a308b42437a6d : SUCCESS in 41m 00s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/322259b726144d32bfb6b00e54fd842f : SUCCESS in 44m 01s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/01f63b3f6e6246f580491eef0828dc0c : SUCCESS in 59m 24s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/5d76228944f341898a625e22f02c85e4 : SUCCESS in 42m 28s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/9976c8cb666d4aab86cc26d73badcb54 : SUCCESS in 38m 40s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/2316699a02bf4792889ea7149a47cef4 : SUCCESS in 4m 38s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/81ee4d3ae3dc4a5c88ef768fdb9a0d64 : FAILURE in 4m 13s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/3605877b24d048e98a717825de2a4b2e : SUCCESS in 4m 10s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/67525cff88da4cfa85626a1f3e73ea03 : SUCCESS in 4m 43s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/95505375d4e34cbfae091004972f988b : SUCCESS in 4m 13s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/71cb135eb22648fc9caf100449e63e9c : SUCCESS in 5m 43s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/9b2591c9dd1f4a43befc8a51c20d8aa7 : SUCCESS in 6m 30s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/da06232bc575428fbce6925c66aa97fb : SUCCESS in 31m 48s","accounts_in_message":[],"_revision_number":1},{"id":"b473e6a786af9697eb604320d28b7c475ce5a066","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 00:50:53.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"79c30907ab5eac7d7ed1dbd356ff93354c85eae2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 01:04:14.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"0548d31dfdf7c1bf3b71ed0de9c04f14659be445","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 02:02:59.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/2c7c84918b374b63ad8b58e702f07bd5 : SUCCESS in 37m 21s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/d5192bd2433d46409bc394c05ce68992 : SUCCESS in 45m 47s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/ecf46e92cb4847dc8a2b3bb716800507 : SUCCESS in 47m 31s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/e2a1d64c636344d3bf43142d0d28c460 : SUCCESS in 54m 11s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/24247cb95c5b4859b12330d1d12711af : SUCCESS in 34m 17s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/889c2e471b2a4c01b6b1bf5c60e4a61e : SUCCESS in 6m 27s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/f4c8324f6f134978b9ff71aaf18c60c3 : SUCCESS in 5m 30s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d83946a2c8554223bd589083ab66d2a8 : SUCCESS in 4m 40s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7710cb0030b243c28fd4ffcc977193b0 : SUCCESS in 5m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/29a40b2b4fc8451682b7648d25fe85e6 : SUCCESS in 4m 18s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/c9d7120e92e24bd580e382778d244ebc : SUCCESS in 5m 48s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/896ffec710704ab3a6ece9f778de63c4 : SUCCESS in 6m 26s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/743a1d8d6cd54d0689a9b6d9cdbd67e7 : SUCCESS in 32m 58s","accounts_in_message":[],"_revision_number":3},{"id":"30a6f1e4f0b0dea7a40de160f2765163e8561c57","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:11:24.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"4d9d12e6566e6ace2410b3c71cd03161b672cbc0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 05:01:59.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/7b19fc4432944081bde48840444c94d9 : SUCCESS in 39m 24s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/d3723316b06543f49ec18268ef4fc0c3 : SUCCESS in 42m 15s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/8e58fc549b19434596fc42fa1605f8c7 : SUCCESS in 45m 27s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/6cdf989951064c508e1318980c3f7c8e : SUCCESS in 35m 12s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/eb68a0e4609f489d8fe60005424496b0 : SUCCESS in 31m 14s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/161e72ce0495448bba3720815c39c8f9 : SUCCESS in 6m 02s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/1f92255eeaa245dfba72f48c5f0e185e : SUCCESS in 5m 06s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/5e73dce1b2974b78aeaf53fb6e954cff : SUCCESS in 3m 22s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/9eeeee642cc84a0b9a4013c94bb7d1de : SUCCESS in 5m 30s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/d5410cb439f6495d84b47c62eb27b0ae : SUCCESS in 4m 15s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/3dccd805ef184b9facc77c2e3fe52a7c : SUCCESS in 5m 19s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/673f5ededda045bf8683598342c485dd : SUCCESS in 6m 51s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/45f681811e0d4bc7bedd3557d19440b4 : SUCCESS in 28m 55s","accounts_in_message":[],"_revision_number":4},{"id":"c4b1ad79d80948aea07e159d5400730975758781","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 13:22:29.000000000","message":"Patch Set 4: Code-Review+2\n\nThanks!","accounts_in_message":[],"_revision_number":4},{"id":"74d6d299e5525c20f828e80d5400cc40933ff683","author":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"date":"2020-11-26 22:36:25.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"cd9e2f53b08c2c0e11813168f89922637561701b","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-26 23:34:43.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"8fd0b0105b5fa5cb364229e52d2242101188d5e7","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:46:48.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/43cab0ef1107472ba9a2ca36eae9e356 : SUCCESS in 42m 15s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/efee21b877f8417f889e845095668bf6 : SUCCESS in 43m 40s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/740047ff16164a878cc3f5055887aeaf : SUCCESS in 52m 42s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/09aad62da3914e428630a284ea73643a : SUCCESS in 35m 19s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/a23bb551ac934e2dbcb8f335f94934ea : SUCCESS in 42m 47s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/818157375ccc47ff9a6d085b7963d2fc : SUCCESS in 5m 43s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/9ed15546bf2c4005a8af3dfe4c6adfd2 : SUCCESS in 4m 38s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/1105f046cd274fdeaceea74c5a13f0df : SUCCESS in 5m 46s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/75ac6b8812574ae6ba8e53aff4587490 : SUCCESS in 4m 34s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/259b935f9a954791b5e515f941a9e93d : SUCCESS in 7m 57s","accounts_in_message":[],"_revision_number":4},{"id":"d7348c9adb6b2e4256cb63632010d29c8266dc92","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:46:56.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"d9360b35fe96d26d606759c32a9021df10c1cd11","revisions":{"5be3d2c5ac263427cee230765fe70529823a6485":{"kind":"REWORK","_number":1,"created":"2020-11-23 22:49:51.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/76/763876/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/76/763876/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/76/763876/1"}}},"commit":{"parents":[{"commit":"4451a2a11f0f5b41930058e758d7c5aa78736db4","subject":"Implement secure RBAC for recordsets","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/4451a2a11f0f5b41930058e758d7c5aa78736db4"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:42:16.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:42:16.000000000","tz":0},"subject":"Implement secure RBAC for service status","message":"Implement secure RBAC for service status\n\nThis commit updates the policies for service status to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: I11c3d7ec8dc871338db7fcd3746e56516683ecd1\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5be3d2c5ac263427cee230765fe70529823a6485"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5be3d2c5ac263427cee230765fe70529823a6485"}]},"branch":"refs/heads/master"},"2812376dc1bbacfcbb61d8b9503606f76ef10542":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 00:50:53.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/76/763876/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/76/763876/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/76/763876/2"}}},"commit":{"parents":[{"commit":"1829dd0956565aca0f4ffeeb9e8b72495e0c5a61","subject":"Implement secure RBAC for recordsets","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/1829dd0956565aca0f4ffeeb9e8b72495e0c5a61"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:42:16.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 00:49:29.000000000","tz":-420},"subject":"Implement secure RBAC for service status","message":"Implement secure RBAC for service status\n\nThis commit updates the policies for service status to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: I11c3d7ec8dc871338db7fcd3746e56516683ecd1\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/2812376dc1bbacfcbb61d8b9503606f76ef10542"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/2812376dc1bbacfcbb61d8b9503606f76ef10542"}]},"branch":"refs/heads/master"},"e63abcf4b7fdc0fcd3c0ca7fb76e8e87a459c5cd":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2020-11-24 01:04:14.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/76/763876/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/76/763876/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/76/763876/3"}}},"commit":{"parents":[{"commit":"f164d914382adfb5279675b12e47e32b244ab8ac","subject":"Implement secure RBAC for recordsets","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/f164d914382adfb5279675b12e47e32b244ab8ac"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:42:16.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 01:03:22.000000000","tz":-420},"subject":"Implement secure RBAC for service status","message":"Implement secure RBAC for service status\n\nThis commit updates the policies for service status to understand\nscope checking and account for a read-only role. This is part of a\nbroader series of changes across OpenStack to provide a consistent\nRBAC experience and improve security.\n\nChange-Id: I11c3d7ec8dc871338db7fcd3746e56516683ecd1\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e63abcf4b7fdc0fcd3c0ca7fb76e8e87a459c5cd"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e63abcf4b7fdc0fcd3c0ca7fb76e8e87a459c5cd"}]},"branch":"refs/heads/master"},"d9360b35fe96d26d606759c32a9021df10c1cd11":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2020-11-24 04:11:24.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/76/763876/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/76/763876/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/76/763876/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/76/763876/4"}}},"commit":{"parents":[{"commit":"5402e40319559a70c9c70a50fa0851d20f14ac4d","subject":"Implement secure RBAC for recordsets","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5402e40319559a70c9c70a50fa0851d20f14ac4d"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:42:16.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:08:05.000000000","tz":0},"subject":"Implement secure RBAC for service status","message":"Implement secure RBAC for service status\n\nThis commit updates the policies for service status to understand\nscope checking and account for a read-only role. This is part of a\nbroader series of changes across OpenStack to provide a consistent\nRBAC experience and improve security.\n\nChange-Id: I11c3d7ec8dc871338db7fcd3746e56516683ecd1\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/d9360b35fe96d26d606759c32a9021df10c1cd11"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/d9360b35fe96d26d606759c32a9021df10c1cd11"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}