)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":455,"name":"Stuart McLaren","email":"stuart.mclaren@hpe.com","username":"stuart-mclaren"},"change_message_id":"465982f740a3d6d96c8abbe6889e7bddf3c8d166","unresolved":false,"context_lines":[{"line_number":10,"context_line":"http://docs.openstack.org/developer/glance/architecture.html:"},{"line_number":11,"context_line":""},{"line_number":12,"context_line":"1. glance_store doesn\u0027t have authorization, but the authentication"},{"line_number":13,"context_line":"   only."},{"line_number":14,"context_line":"2. AuthZ -\u003e AuthZ Middleware for clarity."},{"line_number":15,"context_line":"3. Added an arrow to reflect an optional call from REST API to AuthZ"},{"line_number":16,"context_line":"   Middleware."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":2,"id":"ba8a016a_6d076b82","line":13,"updated":"2015-11-19 15:16:32.000000000","message":"\u003e glance_store doesn\u0027t have authorization\n\nI guess it relies on the authorization of the underlying store, eg in Swift\u0027s case if you supply a valid token you don\u0027t get 401, but could still get 403 if you don\u0027t own the object. But that\u0027s not at the shown level of the diagram.","commit_id":"6ccf977fdb4d555d2965cf8f4624c5a281e143d9"}]}