)]}'
{"id":"openstack%2Fdesignate~763883","triplet_id":"openstack%2Fdesignate~master~If1329182043001e27713457c2d591e6c55ad3e87","project":"openstack/designate","branch":"master","topic":"secure-rbac","hashtags":[],"change_id":"If1329182043001e27713457c2d591e6c55ad3e87","subject":"Implement secure RBAC for zone transfer accepts","status":"MERGED","created":"2020-11-23 22:49:51.000000000","updated":"2020-11-27 00:48:34.000000000","submitted":"2020-11-27 00:48:34.000000000","submitter":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"submission_id":"763883-secure-rbac","meta_rev_id":"b940f52b5cb716063aaaa37ba49b8b466569c23d","_number":763883,"virtual_id_number":763883,"owner":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"tag":"autogenerated:zuul:gate","value":2,"date":"2020-11-27 00:48:27.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":2,"date":"2020-11-26 22:40:06.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":2,"date":"2020-11-24 17:42:56.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":1,"date":"2020-11-26 22:40:06.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"value":0,"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"value":0,"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},{"value":0,"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Gate Blocker Fix / Urgent Change"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2020-11-24 00:33:59.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2020-11-24 00:50:53.000000000","updated_by":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"reviewer":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"state":"REVIEWER"},{"updated":"2020-11-26 22:40:06.000000000","updated_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"reviewer":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"state":"REVIEWER"}],"messages":[{"id":"99440b8b23e8c96ef938b7d1bbff9cb7a958d026","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:49:51.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"b75cd996082a8e2238676cf456ba83ccd32a01fc","tag":"autogenerated:gerrit:setTopic","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-23 22:54:19.000000000","message":"Topic set to secure-rbac","accounts_in_message":[],"_revision_number":1},{"id":"715d0e66010b8781256cfbdd8e1930cfeb9c0c71","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 00:33:59.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/0af56004c22b41089bcd3866af55dec9 : SUCCESS in 43m 14s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/a89d204c0262498297a4427242a00f73 : SUCCESS in 37m 49s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/b3cba8ba50ed4425997d97424ed40d3a : SUCCESS in 57m 33s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/72d33f3fa0254db48db7f87b19a17554 : SUCCESS in 45m 32s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/3296963645e649f3b8955195ca22cdff : SUCCESS in 38m 57s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/e942d64d92a649479ff796f5914014f2 : SUCCESS in 5m 28s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/70ef09317684484fa735dcf34e1b716b : FAILURE in 4m 37s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/281bffb4b5874f8b8991b402248cb7ca : SUCCESS in 3m 30s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/b8c99aba9e014957ba43bc06de7bd9be : SUCCESS in 4m 30s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/2ef7d96ffb2a4191a891094b6755dc28 : SUCCESS in 4m 07s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/064b03c193d346b4829db59d7400bf8f : SUCCESS in 5m 25s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/ee67829f1cb3475abed7fd162b658468 : SUCCESS in 7m 09s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/1db23cb74ef6404980055913067da78b : FAILURE in 1h 03m 16s","accounts_in_message":[],"_revision_number":1},{"id":"75418481b702a19085ff65c1132ada79c435042e","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 00:50:53.000000000","message":"Uploaded patch set 2: Patch Set 1 was rebased.","accounts_in_message":[],"_revision_number":2},{"id":"cf6369826b016f29607972c4e30d453640987324","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 01:04:14.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"1c95cde925a8017b1a8ae11ae772adfe6fd0a403","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 01:56:04.000000000","message":"Patch Set 3: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/b4de1775540b44aba5824e6db8220406 : SUCCESS in 34m 13s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/6992868a2e4d41e6b17a88f076894686 : SUCCESS in 36m 32s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/64bdf239f9d24f5c864bc52e7b534825 : SUCCESS in 46m 34s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/799e1ff4e24a4001aa0e25ef9bd8b82c : SUCCESS in 41m 02s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/a1f77bc3e0d24a26bcddc73bb65ea5f0 : SUCCESS in 35m 10s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/d648bf3387c9440b94d32947232102bf : SUCCESS in 6m 08s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/52cdf05beb7141d694cb6b2faa181930 : SUCCESS in 4m 56s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/f6dfcc574afb4d58b3402fde5d2deb4d : SUCCESS in 4m 28s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/5cf60d98ee804264a6eb6adb059c93c7 : SUCCESS in 5m 29s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/a7f50d3846ca486bade84dd6fd9b9bcb : SUCCESS in 4m 48s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/0ab60bdd469b4bb19cafda9908e51a21 : SUCCESS in 5m 00s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/d063187415554cf2a6c0416a70a8a727 : SUCCESS in 6m 27s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/f46a5ad395054e679529609ba1a87c38 : SUCCESS in 28m 09s","accounts_in_message":[],"_revision_number":3},{"id":"05e9d205b0e3ccc711adadf20e1f609fd478e729","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"date":"2020-11-24 04:11:24.000000000","message":"Uploaded patch set 4: Patch Set 3 was rebased.","accounts_in_message":[],"_revision_number":4},{"id":"e739b48630a1fc6b28c8604ce4cf867f8c74896d","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-24 05:08:30.000000000","message":"Patch Set 4: Verified+1\n\nBuild succeeded (check pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/8889603b410346d4872bce03acf28657 : SUCCESS in 44m 03s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/d9c2dd202e0844e086eb96f7e3b09610 : SUCCESS in 43m 07s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/5e66bbdef9e44bceacd86b8e32cb43ab : SUCCESS in 43m 48s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/e976f2524db44bcfa37f81f5da0d1791 : SUCCESS in 43m 40s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/26969df831704b47a4eb18f9deba7e48 : SUCCESS in 47m 04s\n- openstack-tox-cover https://zuul.opendev.org/t/openstack/build/65406e02d7504d6db12e9401fec81555 : SUCCESS in 5m 05s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/4368ad8d02404746812af430cc3b1980 : SUCCESS in 4m 38s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/c75e0a74e6a64bd6a98f852e032c397f : SUCCESS in 3m 32s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/b92f6c5d32024d7b81a554eefb32a574 : SUCCESS in 3m 55s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/23b3de89154b4c92879cbf76090856af : SUCCESS in 4m 13s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/64c600ba6e7f46d08d848091c0e7743d : SUCCESS in 5m 03s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/3bf6237a6241490883c24c82b5cf6da9 : SUCCESS in 6m 16s\n- neutron-tempest-plugin-designate-scenario https://zuul.opendev.org/t/openstack/build/a28b435fa4de4907831bdfc6b5b1db77 : SUCCESS in 40m 02s","accounts_in_message":[],"_revision_number":4},{"id":"d029c06110bb7fce74ad8398aa612a53554e81b3","author":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"date":"2020-11-24 17:42:56.000000000","message":"Patch Set 4: Code-Review+2\n\nThanks!","accounts_in_message":[],"_revision_number":4},{"id":"e2c11b52bcfbe0b1f00143b48b2eb50af1962f75","author":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"},"date":"2020-11-26 22:40:06.000000000","message":"Patch Set 4: Code-Review+2 Workflow+1","accounts_in_message":[],"_revision_number":4},{"id":"6cf61a891532ff0564a338b548bd40bb09d0f480","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-26 23:35:05.000000000","message":"Patch Set 4: -Verified\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":4},{"id":"65c3c67a7d1bd1cc121b6321d406201e7a6b50b8","tag":"autogenerated:zuul:gate","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:48:27.000000000","message":"Patch Set 4: Verified+2\n\nBuild succeeded (gate pipeline).\n\n- designate-bind9 https://zuul.opendev.org/t/openstack/build/1b534f43874641d7806b6ace238787d5 : SUCCESS in 36m 31s\n- designate-pdns4 https://zuul.opendev.org/t/openstack/build/35c8919dadbb417bb81c094b11d55b17 : SUCCESS in 40m 13s\n- designate-grenade-pdns4 https://zuul.opendev.org/t/openstack/build/5f406da18df544f7bb49322b5541d65e : SUCCESS in 56m 34s\n- designate-ipv6-only-pdns4 https://zuul.opendev.org/t/openstack/build/7e2fc6f64efa4ac3b23f74cbfbe3d657 : SUCCESS in 36m 24s\n- designate-ipv6-only-bind9 https://zuul.opendev.org/t/openstack/build/427fc179b2cb4811b038d77b0c209237 : SUCCESS in 41m 14s\n- openstack-tox-lower-constraints https://zuul.opendev.org/t/openstack/build/54b42e84231748ee9f95fb356c4687ef : SUCCESS in 4m 57s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/af283d7626d24647bf266d5de0626f6c : SUCCESS in 3m 29s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/ab57339f54c74c9d8b36d7bb6b0cee77 : SUCCESS in 4m 26s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/54a15ec1f425419b8ac4f5a9192697e9 : SUCCESS in 4m 13s\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/566db7116ce24e129af0dbd85fd1941f : SUCCESS in 8m 53s","accounts_in_message":[],"_revision_number":4},{"id":"b940f52b5cb716063aaaa37ba49b8b466569c23d","tag":"autogenerated:gerrit:merged","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2020-11-27 00:48:34.000000000","message":"Change has been successfully merged by Zuul","accounts_in_message":[],"_revision_number":4}],"current_revision_number":4,"current_revision":"62cef160c02b3523b48f04809f7b0dcbd69039c8","revisions":{"1288ad1b392b394b87e7767d4e8b2b0cb2205d58":{"kind":"REWORK","_number":1,"created":"2020-11-23 22:49:51.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/83/763883/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/83/763883/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/83/763883/1"}}},"commit":{"parents":[{"commit":"c8936b4d094b9d7572cf16c9e629ec3d678e0d98","subject":"Implement secure RBAC for zone imports","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/c8936b4d094b9d7572cf16c9e629ec3d678e0d98"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:39:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:39:49.000000000","tz":0},"subject":"Implement secure RBAC for zone transfer accepts","message":"Implement secure RBAC for zone transfer accepts\n\nThis commit updates the policies for zone transfer accepts to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: If1329182043001e27713457c2d591e6c55ad3e87\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/1288ad1b392b394b87e7767d4e8b2b0cb2205d58"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/1288ad1b392b394b87e7767d4e8b2b0cb2205d58"}]},"branch":"refs/heads/master"},"6af316f523531b05fcbd0b7bf65a6b095d389b93":{"kind":"TRIVIAL_REBASE","_number":2,"created":"2020-11-24 00:50:53.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/83/763883/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/83/763883/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/83/763883/2"}}},"commit":{"parents":[{"commit":"c3a78626934e5389c5c6fba3a087fdc3a1441ef2","subject":"Implement secure RBAC for zone imports","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/c3a78626934e5389c5c6fba3a087fdc3a1441ef2"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:39:49.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 00:49:31.000000000","tz":-420},"subject":"Implement secure RBAC for zone transfer accepts","message":"Implement secure RBAC for zone transfer accepts\n\nThis commit updates the policies for zone transfer accepts to understand scope\nchecking and account for a read-only role. This is part of a broader series of\nchanges across OpenStack to provide a consistent RBAC experience and improve\nsecurity.\n\nChange-Id: If1329182043001e27713457c2d591e6c55ad3e87\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/6af316f523531b05fcbd0b7bf65a6b095d389b93"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/6af316f523531b05fcbd0b7bf65a6b095d389b93"}]},"branch":"refs/heads/master"},"ede8c910bdce232bb1ccd933d8d98dccc583ea94":{"kind":"TRIVIAL_REBASE_WITH_MESSAGE_UPDATE","_number":3,"created":"2020-11-24 01:04:14.000000000","uploader":{"_account_id":19298,"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","username":"nicolasbock"},"ref":"refs/changes/83/763883/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/83/763883/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/83/763883/3"}}},"commit":{"parents":[{"commit":"d2c04adbab296e4b2d32aa708e94f630ef9d548f","subject":"Implement secure RBAC for zone imports","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/d2c04adbab296e4b2d32aa708e94f630ef9d548f"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:39:49.000000000","tz":0},"committer":{"name":"Nicolas Bock","email":"nicolas.bock@canonical.com","date":"2020-11-24 01:03:47.000000000","tz":-420},"subject":"Implement secure RBAC for zone transfer accepts","message":"Implement secure RBAC for zone transfer accepts\n\nThis commit updates the policies for zone transfer accepts to\nunderstand scope checking and account for a read-only role. This is\npart of a broader series of changes across OpenStack to provide a\nconsistent RBAC experience and improve security.\n\nChange-Id: If1329182043001e27713457c2d591e6c55ad3e87\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/ede8c910bdce232bb1ccd933d8d98dccc583ea94"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/ede8c910bdce232bb1ccd933d8d98dccc583ea94"}]},"branch":"refs/heads/master"},"62cef160c02b3523b48f04809f7b0dcbd69039c8":{"kind":"TRIVIAL_REBASE","_number":4,"created":"2020-11-24 04:11:24.000000000","uploader":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"ref":"refs/changes/83/763883/4","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/designate","ref":"refs/changes/83/763883/4","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/4 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/4 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/designate refs/changes/83/763883/4 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/designate refs/changes/83/763883/4"}}},"commit":{"parents":[{"commit":"40eb2626f0a1ab6d07c3913c6e03a92e70f112e3","subject":"Implement secure RBAC for zone imports","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/40eb2626f0a1ab6d07c3913c6e03a92e70f112e3"}]}],"author":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-23 22:39:49.000000000","tz":0},"committer":{"name":"Lance Bragstad","email":"lbragstad@gmail.com","date":"2020-11-24 04:08:05.000000000","tz":0},"subject":"Implement secure RBAC for zone transfer accepts","message":"Implement secure RBAC for zone transfer accepts\n\nThis commit updates the policies for zone transfer accepts to\nunderstand scope checking and account for a read-only role. This is\npart of a broader series of changes across OpenStack to provide a\nconsistent RBAC experience and improve security.\n\nChange-Id: If1329182043001e27713457c2d591e6c55ad3e87\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/62cef160c02b3523b48f04809f7b0dcbd69039c8"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/designate/commit/62cef160c02b3523b48f04809f7b0dcbd69039c8"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[{"status":"CLOSED","labels":[{"label":"Verified","status":"OK","applied_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}},{"label":"Code-Review","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Workflow","status":"OK","applied_by":{"_account_id":22623,"name":"Erik Olof Gunnar Andersson","email":"eandersson@blizzard.com","username":"eoandersson"}},{"label":"Review-Priority","status":"MAY"}]}],"submit_requirements":[{"name":"Verified","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Verified\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Verified\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Workflow","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Workflow\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Workflow\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}},{"name":"Code-Review","status":"SATISFIED","is_legacy":true,"submittability_expression_result":{"expression":"label:Code-Review\u003dCustom-Rule","fulfilled":true,"status":"PASS","passing_atoms":["label:Code-Review\u003dCustom-Rule"],"failing_atoms":[],"atom_explanations":{}}}]}