)]}'
{"id":"openstack%2Fdesignate~763881","triplet_id":"openstack%2Fdesignate~master~I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72","project":"openstack/designate","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72","subject":"Implement secure RBAC for zone exports","status":"MERGED","created":"2020-11-23 22:49:51.000000000","updated":"2020-11-27 00:48:02.000000000","submitted":"2020-11-27 00:48:02.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"763881-secure-rbac","meta_rev_id":"46d97f89f805732691c4bd99ca497a034312380f","_number":763881,"virtual_id_number":763881,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-11-27 00:48:01.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"all":[{"value":2,"date":"2020-11-24 22:00:23.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-11-26 22:39:30.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-11-26 22:39:30.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-24 00:11:15.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-24 00:50:53.000000000","updated_by":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"reviewer":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"state":"REVIEWER"},{"updated":"2020-11-26 22:39:30.000000000","updated_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"reviewer":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"state":"REVIEWER"}],"messages":[{"id":"b435c14172fd8bbb0a22fe717712a702c48d5562","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:49:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"ca555c1a40c52327b09e7f91361edf7b832a2e64","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:54:00.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"38e2d1923be4a79bfd4e07f3f78de8dd7007da41","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 00:11:15.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/ca7da9a1a89344afa99646df4b6b2d9c : SUCCESS in 44m 07s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/157a6e219d724cb98b2bda648a1b83de : SUCCESS in 44m 57s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/eba1338d3f294773bf698f00cd54d6bc : SUCCESS in 54m 22s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/a3577eabffc54184a26b5a3575156821 : SUCCESS in 44m 21s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/2aeab7f2b58f417281c114f81b78acb1 : SUCCESS in 43m 41s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/28463c6dfa524e7a967e8cddc386fc96 : SUCCESS in 5m 43s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/319a44fd5d17459986f6a0c220c9f2e1 : FAILURE in 3m 53s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/75ecf245fb2b45cf82647cd25e15fb12 : SUCCESS in 3m 55s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/9c9b2da8be774f26a3e00703c67d82fe : SUCCESS in 4m 37s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/a155fd30b6484acda79eae23b2be055f : SUCCESS in 4m 41s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/97aeabe751e34a98b92878b00610b2dd : SUCCESS in 5m 31s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/64eed8375f644341ad75d4118c0c9ce8 : SUCCESS in 7m 16s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/775c12b0350c40b281fe7cad205b85fe : SUCCESS in 39m 58s","accounts_in_message":[],"_revision_number":1},{"id":"1c4d062cb9f173e025db9320dedff616da4709dd","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 00:50:53.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"ebcf909c89ca3cf146bd9b026385f11a6cbf413c","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 01:04:14.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"3e96af85d87edfc4b8924cd051c0a607364db778","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 02:08:05.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/0c1f8d13fdb44ecba74dfa8d5c44c82c : SUCCESS in 32m 50s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/4fd7a7d7d8c247dc8c72b294ba70b93e : SUCCESS in 40m 13s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/5d5f05a43613412d98fd4015939caa46 : SUCCESS in 1h 00m 34s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/dc58dd1baaa248eda1e50e198f06d424 : SUCCESS in 33m 58s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/9e3659588ec746b6bda230696e5bf066 : SUCCESS in 45m 05s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/e15919cc7e0043e88aaf5c3a6ca478f0 : SUCCESS in 5m 31s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/0d5365adff234bfaabdf5aab48b58b68 : SUCCESS in 5m 02s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/b377ffe027024f0692fb67fcb31ff397 : SUCCESS in 3m 50s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/334ae7349e034dcbb5cefd78d24cc852 : SUCCESS in 4m 20s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/14e1d4a81b7f48c0a64f026615d20be4 : SUCCESS in 4m 27s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/e3d0321358ce4a25a0817815e43c4ebd : SUCCESS in 5m 12s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/f2749b4dda6f40ac85ceefc8b7eea0a6 : SUCCESS in 7m 00s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/f3596c6ce82c4db5b92cf10344f2159c : SUCCESS in 36m 24s","accounts_in_message":[],"_revision_number":3},{"id":"d1eaa3231b1600c15971c2774d5850e7c05cdf2b","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:11:24.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"27f4c1564edb35bd67e40fbc0f87fe19fb269d15","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 05:16:51.000000000","message":"Patch Set 4: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/76ee78753fac42d6894849c84a9c06ad : SUCCESS in 31m 28s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/640dff344b614fc698db579f1b3c4bcf : SUCCESS in 47m 35s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/2685717985674b6e8f513b615b1c1e7a : SUCCESS in 56m 52s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/3f62e39b1d74499f9db9363c5afbdbee : SUCCESS in 42m 12s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/3ecfe7456ce845ac95b0d591c212c037 : SUCCESS in 42m 10s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/b680bb684c144e4489876c8a8b6fb9b8 : SUCCESS in 5m 00s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/30adb92bea124cdbad20573b02bac3aa : SUCCESS in 4m 23s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/d25ab26f5d9c48e6a77739585278661f : SUCCESS in 3m 35s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7022768111dc4024ba7640f2e89cd65f : SUCCESS in 4m 17s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/faa8fdfdb7f94e568a6345605a1deadf : SUCCESS in 3m 53s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/573a3a0df6724a8591b55ba905214535 : SUCCESS in 4m 30s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/bf43680d77b341b0938342f6b287d9a7 : SUCCESS in 7m 06s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/cac04075b3a842948243c62b03263835 : FAILURE in 35m 54s","accounts_in_message":[],"_revision_number":4},{"id":"0a910d6c28951f19a0585fe4c64010e9a6cf91fa","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 17:41:41.000000000","message":"Patch Set 4:\n\nrecheck","accounts_in_message":[],"_revision_number":4},{"id":"51d0b12ac846acacc09a2e3809fe27475359876e","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 18:37:40.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/6f32d03ed8474abbb6be72f3fe92bb70 : SUCCESS in 35m 34s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/d87d44ca91064fdb9f9567566e364087 : SUCCESS in 34m 00s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/37f091dc106a4ac588c8636a2963ba06 : SUCCESS in 52m 20s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/07b69dafa06f432b92dbd4099890f35a : SUCCESS in 45m 38s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/ad8bcd92e650417dad17bae73731c565 : SUCCESS in 38m 12s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/31d616d7ffad4bc7a95c0422c8a04ccc : SUCCESS in 5m 25s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/1af4ea5fcfb148e8ad24cb8e757382d9 : SUCCESS in 4m 56s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8b6d5bbd96584bd0a603abf9d8768f69 : SUCCESS in 5m 00s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/6c9582f2722041ab85d8af102adae26d : SUCCESS in 7m 09s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/52d60d401a5c4fd7a4a432486682a1d4 : SUCCESS in 4m 16s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/b7e17f902ddc42178d29d9eec414f373 : SUCCESS in 5m 14s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/213da477a48741948b72705c7889dfea : SUCCESS in 7m 06s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/66e25c82cd774d1ea03db1513e7dc2b0 : SUCCESS in 33m 41s","accounts_in_message":[],"_revision_number":4},{"id":"1610ca488a958c8155ddcba9c22fc860d784aafb","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 22:00:23.000000000","message":"Patch Set 4: Code-Review+2\n\nThanks!","accounts_in_message":[],"_revision_number":4},{"id":"1990765a81e3acfa2fe262f231650f83005ebab2","author":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"date":"2020-11-26 22:39:30.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"4ddc7601b6fd6cd2af25c8d06ae885c0511473b0","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-26 23:34:58.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"6502c5457778ef6b4ec12613a9912bddf2df8ac2","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:48:01.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/68f7b549e1c845a8b8bd9729f24a8647 : SUCCESS in 33m 39s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/357ab2397fd0484082b2a8c60cc07c99 : SUCCESS in 31m 15s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/e5f34e78b6664b979d4bad2ed3a09727 : SUCCESS in 48m 02s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/3f97a9162b0e4a5980b7390891ee0f37 : SUCCESS in 33m 52s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/14610cc296124989b13adc2ce655b0aa : SUCCESS in 34m 40s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/12f093dcd7eb45e68e123aceaeccfc29 : SUCCESS in 4m 35s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/1d0c2dff5f524cc48db2cc00d5e61b63 : SUCCESS in 3m 22s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/d0be2a535a664704a58dce11484fbe27 : SUCCESS in 4m 34s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/2c76bc20a26648e68cb67fda134e3f44 : SUCCESS in 4m 07s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/15f5da8d675144e7896b4388a69a4df7 : SUCCESS in 7m 02s","accounts_in_message":[],"_revision_number":4},{"id":"46d97f89f805732691c4bd99ca497a034312380f","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:48:02.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"d9ee5be3b9f13489cfcbdcb0ec200254a254df08","revisions":{"b4886bca7e27a6927826140691b7e52ecc3be544":{"kind":"REWORK","_number":1,"created":"2020-11-23 22:49:51.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/81/763881/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/81/763881/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/81/763881/1"}}},"commit":{"parents":[{"commit":"30fdeaaf445ffdcb70a722b0286a5216f21609f3","subject":"Implement secure RBAC for zones","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/30fdeaaf445ffdcb70a722b0286a5216f21609f3"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:20:58.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:26:41.000000000","tz":0},"subject":"Implement secure RBAC for zone exports","message":"Implement secure RBAC for zone exports\n\nThis commit updates the policies for zone exports to understand scope checking\nand account for a read-only role. This is part of a broader series of changes\nacross OpenStack to provide a consistent RBAC experience and improve security.\n\nChange-Id: I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/b4886bca7e27a6927826140691b7e52ecc3be544"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/b4886bca7e27a6927826140691b7e52ecc3be544"}]},"branch":"refs/heads/master"},"6fb6ef1e904893cf8d6a80c802e96f64bd45efc8":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 00:50:53.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/81/763881/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/81/763881/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/81/763881/2"}}},"commit":{"parents":[{"commit":"4006da1170aca7addf0b6bcbb11aafe1dba14b79","subject":"Implement secure RBAC for zones","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/4006da1170aca7addf0b6bcbb11aafe1dba14b79"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:20:58.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 00:49:30.000000000","tz":-420},"subject":"Implement secure RBAC for zone exports","message":"Implement secure RBAC for zone exports\n\nThis commit updates the policies for zone exports to understand scope checking\nand account for a read-only role. This is part of a broader series of changes\nacross OpenStack to provide a consistent RBAC experience and improve security.\n\nChange-Id: I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/6fb6ef1e904893cf8d6a80c802e96f64bd45efc8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/6fb6ef1e904893cf8d6a80c802e96f64bd45efc8"}]},"branch":"refs/heads/master"},"44ab2a5e6faebe66d90728f4ab6d840468ec3b38":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2020-11-24 01:04:14.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/81/763881/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/81/763881/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/81/763881/3"}}},"commit":{"parents":[{"commit":"5c00c41b80f0ce0edca3c29f806786b86d7c9a22","subject":"Implement secure RBAC for zones","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/5c00c41b80f0ce0edca3c29f806786b86d7c9a22"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:20:58.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 01:03:41.000000000","tz":-420},"subject":"Implement secure RBAC for zone exports","message":"Implement secure RBAC for zone exports\n\nThis commit updates the policies for zone exports to understand scope\nchecking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC\nexperience and improve security.\n\nChange-Id: I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/44ab2a5e6faebe66d90728f4ab6d840468ec3b38"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/44ab2a5e6faebe66d90728f4ab6d840468ec3b38"}]},"branch":"refs/heads/master"},"d9ee5be3b9f13489cfcbdcb0ec200254a254df08":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2020-11-24 04:11:24.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/81/763881/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/81/763881/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/81/763881/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/81/763881/4"}}},"commit":{"parents":[{"commit":"0c952e4a74d6dd9cd3f5c49aa32b4d27112e51ae","subject":"Implement secure RBAC for zones","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/0c952e4a74d6dd9cd3f5c49aa32b4d27112e51ae"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:20:58.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:08:05.000000000","tz":0},"subject":"Implement secure RBAC for zone exports","message":"Implement secure RBAC for zone exports\n\nThis commit updates the policies for zone exports to understand scope\nchecking and account for a read-only role. This is part of a broader\nseries of changes across OpenStack to provide a consistent RBAC\nexperience and improve security.\n\nChange-Id: I5dde051a1ce565cd35cedc11cb0ff5afe35a8d72\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/d9ee5be3b9f13489cfcbdcb0ec200254a254df08"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/d9ee5be3b9f13489cfcbdcb0ec200254a254df08"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}