)]}'
{"id":"openstack%2Fdesignate~763878","triplet_id":"openstack%2Fdesignate~master~I0df00a826dcaf73c6a078a39585839022b71268a","project":"openstack/designate","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"I0df00a826dcaf73c6a078a39585839022b71268a","subject":"Implement secure RBAC for top-level domains","status":"MERGED","created":"2020-11-23 22:49:51.000000000","updated":"2020-11-27 15:02:10.000000000","submitted":"2020-11-27 00:47:09.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":4,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"763878-secure-rbac","meta_rev_id":"0caceb9ad42b81ada8b2c27e56132dbf203ad85c","_number":763878,"virtual_id_number":763878,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-11-27 00:47:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"all":[{"value":2,"date":"2020-11-24 13:27:19.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-11-26 22:37:58.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-11-26 22:37:58.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-24 00:18:44.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-24 00:50:53.000000000","updated_by":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"reviewer":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"state":"REVIEWER"},{"updated":"2020-11-26 22:37:58.000000000","updated_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"reviewer":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"state":"REVIEWER"}],"messages":[{"id":"32febbfab2d789d689ffbe86b489ed45d4d53656","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:49:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"3b589787927267608be4d32f074897404dcd0b3c","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:53:47.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"24f8af16fd32ea5539f856ea99e8e91c9bb0ad99","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 00:18:44.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/12ef0711295541ff8d3dfdc8775b1e02 : SUCCESS in 43m 08s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/94f3113948c64becb45c2d78cbb86982 : FAILURE in 28m 10s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/7058541dbc0d44b28338bfc2bdf50275 : SUCCESS in 53m 59s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/9a1b38b54ad34aef9af946862f5ada15 : SUCCESS in 52m 01s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/9727c79d1dba4eb0a1e53b9f22bfecc1 : SUCCESS in 36m 15s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/f72b75b07d3f4488b95daaf2e982d90d : SUCCESS in 5m 09s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/a94560e1b14a413eb31acdcc344d9fba : FAILURE in 3m 31s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/03a54fa5e3614b25ab74dcbe2059740a : SUCCESS in 3m 43s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/e986735049e4477cbc5affb66ae39299 : SUCCESS in 4m 25s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/60e1f0b8c9f14ef0a6028250eeb2370d : SUCCESS in 4m 27s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/1f9d2346cad74c5d813740d5999f0f22 : SUCCESS in 6m 02s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/0125f202adb2498f906921c46a2d9edb : SUCCESS in 7m 17s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/e3af283d76c144889bf86f84fe4f5f59 : SUCCESS in 51m 06s","accounts_in_message":[],"_revision_number":1},{"id":"64a9643406d0d33ae0a651531660193ea3ca0aa9","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 00:50:53.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"a0b6a56fc0c6cbafabd1c863514831ca408cec93","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 01:04:14.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"6aced048803753b5e087108069c9ef6d10e21208","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 02:00:23.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/313b8652893a4b22bb08a06219692ac0 : SUCCESS in 37m 14s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/48789607ea2e4dd6bec2409963de30b6 : SUCCESS in 32m 59s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/590d67ffc3d34bd79a5ee47a4ec6cd84 : SUCCESS in 51m 34s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/3fd2e0b1bce040799eb0e0ad1704ee80 : SUCCESS in 46m 33s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/afad8ea584c04663be7ec729e9a6e961 : SUCCESS in 46m 44s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/835d7f78ac204a6c93b0904f31568276 : SUCCESS in 6m 00s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/bee8a9f850294d0aa8280ca7f159a358 : SUCCESS in 5m 38s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/618887029dc4467e950ae6b3e62e5ea3 : SUCCESS in 3m 55s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/3839e8e5e4f0417cb2d2394b5764ed78 : SUCCESS in 4m 22s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/cf2565941790418b9bcc50e6d2d9bc02 : SUCCESS in 5m 05s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/bc9d86f6476c4392a66ac89a47d79e88 : SUCCESS in 5m 36s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/1f5a3acafd90456eb1a6b68c49e4d043 : SUCCESS in 7m 17s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/edac9cf483fa448a964a053c8ccfa476 : SUCCESS in 36m 00s","accounts_in_message":[],"_revision_number":3},{"id":"072323cb61682c1492c6972c49c150aeada8fb16","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:11:24.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"6bed3357e7dca6af4c6a5f8cd30096edb80b62de","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:14:54.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"d8ba01078a062f90c8deabbddaa53c987a9b6a9c","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 05:17:55.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/9a13a61988824b5ab2868436e35b4483 : SUCCESS in 46m 18s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/94e88e599a21421bb7188d2955d085a7 : SUCCESS in 46m 16s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/c9536d035d0e4093b19a35efd32014d0 : SUCCESS in 58m 06s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/41e63563ddf346269f89b08bf4ef4d7d : SUCCESS in 39m 57s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/a36413620109463eb9c53ebb9509f40f : SUCCESS in 42m 38s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/0984c8e59aa0411f9371827acac8cd1e : SUCCESS in 5m 26s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/8f071e5fb91e43dbbad384e6d37bcf32 : SUCCESS in 4m 43s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c7b21e4ad1eb4f318a1be52c84a5ed20 : SUCCESS in 4m 23s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7cb8b1ee3eea4f76a66a4ceb694d7904 : SUCCESS in 4m 55s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/5e1b0c0841c0407f8cfb8443c4098e6d : SUCCESS in 4m 32s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/ee2169506e69420c9767dc64bc84dafe : SUCCESS in 4m 56s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/a6e50626023b4a29a2197b9f9d03ec4f : SUCCESS in 7m 32s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/d679359e945a440a8794b630dedefef7 : SUCCESS in 37m 14s","accounts_in_message":[],"_revision_number":4},{"id":"d38ae22ad14cdf083c4355ee996ee46803a0143b","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 13:27:19.000000000","message":"Patch Set 4: Code-Review+2\n\n(1 comment)\n\nThanks!","accounts_in_message":[],"_revision_number":4},{"id":"4b1988c521c888de125d1032de227d49f51521e2","author":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"date":"2020-11-26 22:37:58.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1\n\n(1 comment)","accounts_in_message":[],"_revision_number":4},{"id":"e7e5c01c0527f9824c60def273141973318d3972","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-26 23:34:54.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"e36d69d5723dc4f4099230b20535f2116aa88c4c","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:47:06.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/4001636912e949e090b4ed47b7619b54 : SUCCESS in 36m 46s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/9c085db6dbae43d0aef177c80d9ca94e : SUCCESS in 34m 03s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/d9e807a264074862bd25f6f42b8cf966 : SUCCESS in 48m 44s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/e6b537e0fcbe423196a74383c4deed1b : SUCCESS in 49m 05s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/0403e448db7b4a78b4e2ae4401248179 : SUCCESS in 35m 27s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/8089eec4311c4b228072291c1627aa24 : SUCCESS in 5m 42s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8efdf879ea484ff898a59c5f41b35ead : SUCCESS in 3m 18s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/65507eb2d20d4832b171ca2bc16a5944 : SUCCESS in 5m 41s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/de9b2c6b234841c7a2fe3589dc93241e : SUCCESS in 4m 20s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/dd4a4b58dcd747b4b9ad33cfb14fa480 : SUCCESS in 7m 00s","accounts_in_message":[],"_revision_number":4},{"id":"e4e1501b4623ca66d74881beda59327aa14ab6f6","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:47:09.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4},{"id":"0caceb9ad42b81ada8b2c27e56132dbf203ad85c","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-27 15:02:10.000000000","message":"Patch Set 4:\n\n(1 comment)","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"e99f3588f1624f806265b264db1f82bf56fdedb9","revisions":{"3253551904c8626861db155770254ebd0cc2c55d":{"kind":"REWORK","_number":1,"created":"2020-11-23 22:49:51.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/78/763878/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/78/763878/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/78/763878/1"}}},"commit":{"parents":[{"commit":"428a29f431c5e4045e7e1ee785f8e8292ee9c174","subject":"Implement secure RBAC for tenant policies","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/428a29f431c5e4045e7e1ee785f8e8292ee9c174"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:56:48.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:56:48.000000000","tz":0},"subject":"Implement secure RBAC for top-level domains","message":"Implement secure RBAC for top-level domains\n\nThis commit updates the policies for top-level domains to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: I0df00a826dcaf73c6a078a39585839022b71268a\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/3253551904c8626861db155770254ebd0cc2c55d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/3253551904c8626861db155770254ebd0cc2c55d"}]},"branch":"refs/heads/master"},"7c088bae546df39141be524be053b0add66c6d53":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 00:50:53.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/78/763878/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/78/763878/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/78/763878/2"}}},"commit":{"parents":[{"commit":"f38b0c2089b14b380b759301cd3d47e5f3186236","subject":"Implement secure RBAC for tenant policies","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/f38b0c2089b14b380b759301cd3d47e5f3186236"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:56:48.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 00:49:29.000000000","tz":-420},"subject":"Implement secure RBAC for top-level domains","message":"Implement secure RBAC for top-level domains\n\nThis commit updates the policies for top-level domains to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: I0df00a826dcaf73c6a078a39585839022b71268a\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/7c088bae546df39141be524be053b0add66c6d53"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/7c088bae546df39141be524be053b0add66c6d53"}]},"branch":"refs/heads/master"},"2d7a382a49403ee71f80a1347d56c02763c52734":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2020-11-24 01:04:14.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/78/763878/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/78/763878/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/78/763878/3"}}},"commit":{"parents":[{"commit":"e0748fc59ae664e59383594206a2c3701f4b9eb5","subject":"Implement secure RBAC for tenant policies","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e0748fc59ae664e59383594206a2c3701f4b9eb5"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:56:48.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 01:03:31.000000000","tz":-420},"subject":"Implement secure RBAC for top-level domains","message":"Implement secure RBAC for top-level domains\n\nThis commit updates the policies for top-level domains to understand\nscope checking and account for a read-only role. This is part of a\nbroader series of changes across OpenStack to provide a consistent\nRBAC experience and improve security.\n\nChange-Id: I0df00a826dcaf73c6a078a39585839022b71268a\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/2d7a382a49403ee71f80a1347d56c02763c52734"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/2d7a382a49403ee71f80a1347d56c02763c52734"}]},"branch":"refs/heads/master"},"e99f3588f1624f806265b264db1f82bf56fdedb9":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2020-11-24 04:11:24.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/78/763878/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/78/763878/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/78/763878/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/78/763878/4"}}},"commit":{"parents":[{"commit":"e477cf33b4efd3d898b3698dacac5bbf0112d93c","subject":"Implement secure RBAC for tenant policies","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e477cf33b4efd3d898b3698dacac5bbf0112d93c"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 21:56:48.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:08:05.000000000","tz":0},"subject":"Implement secure RBAC for top-level domains","message":"Implement secure RBAC for top-level domains\n\nThis commit updates the policies for top-level domains to understand\nscope checking and account for a read-only role. This is part of a\nbroader series of changes across OpenStack to provide a consistent\nRBAC experience and improve security.\n\nChange-Id: I0df00a826dcaf73c6a078a39585839022b71268a\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e99f3588f1624f806265b264db1f82bf56fdedb9"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/e99f3588f1624f806265b264db1f82bf56fdedb9"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}