)]}'
{"api-ref/source/v2/images-import.inc":[{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"5f41b7c2c9071c615fd92ad615a93cffd2fc07fe","unresolved":false,"context_lines":[{"line_number":284,"context_line":"  the user. In case of a partial success, the locations added to the"},{"line_number":285,"context_line":"  image will be the stores where the data has been correctly uploaded."},{"line_number":286,"context_line":""},{"line_number":287,"context_line":"- Operation to perform copying of unowned images should be allowed by"},{"line_number":288,"context_line":"  setting ``copy_image`` policy in policy.json"},{"line_number":289,"context_line":""},{"line_number":290,"context_line":"**Synchronous Postconditions**"},{"line_number":291,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"9f560f44_d2f733f5","line":288,"range":{"start_line":287,"start_character":49,"end_line":288,"end_character":46},"updated":"2020-07-27 13:52:22.000000000","message":"Since api users can\u0027t change policy, you should probably just say\n\n- By default, you may perform the copy-image operation only on images that you own.  This action is governed by policy, so some users may be granted permission to copy unowned images.  Consult your cloud\u0027s local documentation for details.","commit_id":"1d47a6800ac6e5fb011aa5356cbc75b62489af94"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"774994f2786310bf82384fe777040fbabfd1af15","unresolved":false,"context_lines":[{"line_number":284,"context_line":"  the user. In case of a partial success, the locations added to the"},{"line_number":285,"context_line":"  image will be the stores where the data has been correctly uploaded."},{"line_number":286,"context_line":""},{"line_number":287,"context_line":"- Operation to perform copying of unowned images should be allowed by"},{"line_number":288,"context_line":"  setting ``copy_image`` policy in policy.json"},{"line_number":289,"context_line":""},{"line_number":290,"context_line":"**Synchronous Postconditions**"},{"line_number":291,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"9f560f44_cb181e83","line":288,"range":{"start_line":287,"start_character":49,"end_line":288,"end_character":46},"in_reply_to":"9f560f44_b278bff8","updated":"2020-07-27 16:54:58.000000000","message":"I have changed the wording as suggested by Brian.","commit_id":"1d47a6800ac6e5fb011aa5356cbc75b62489af94"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"cdcc225a61a83f26d58dcb5c1a59bb2caa4d07b9","unresolved":false,"context_lines":[{"line_number":284,"context_line":"  the user. In case of a partial success, the locations added to the"},{"line_number":285,"context_line":"  image will be the stores where the data has been correctly uploaded."},{"line_number":286,"context_line":""},{"line_number":287,"context_line":"- Operation to perform copying of unowned images should be allowed by"},{"line_number":288,"context_line":"  setting ``copy_image`` policy in policy.json"},{"line_number":289,"context_line":""},{"line_number":290,"context_line":"**Synchronous Postconditions**"},{"line_number":291,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"9f560f44_b278bff8","line":288,"range":{"start_line":287,"start_character":49,"end_line":288,"end_character":46},"in_reply_to":"9f560f44_d2f733f5","updated":"2020-07-27 14:01:53.000000000","message":"FWIW, I don\u0027t think it\u0027s problematic to mention policy in here specifically, as operators may read this as well trying to perform things themselves, especially things like copy-image that are admin-focused most of the time.\n\nHowever, I just scanned the rest of the file here and see no other mention of policy. I\u0027m not sure if that\u0027s because most of your policy is pretty rigidly enforced at lower layers than the API or what.\n\nFWIW, the nova api-ref guideline doc specifically asks for mentioning policy elements that can be tweaked (policy under this paragraph):\n\nhttps://docs.openstack.org/nova/latest/contributor/api-ref-guideline.html#description\n\nand we do, here\u0027s an example:\n\nhttps://docs.openstack.org/api-ref/compute/#server-usage-audit-log-os-instance-usage-audit-log\n\nMaybe just a wording change would help make it more clear (as in the nova example above) that the statement is focused on the operator?","commit_id":"1d47a6800ac6e5fb011aa5356cbc75b62489af94"}],"doc/source/admin/interoperable-image-import.rst":[{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":215,"context_line":"For the ``copy-image`` method, make sure that ``copy-image`` is included"},{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_fab0e8df","line":218,"range":{"start_line":218,"start_character":8,"end_line":218,"end_character":17},"updated":"2020-07-24 13:34:48.000000000","message":"copy-image","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":215,"context_line":"For the ``copy-image`` method, make sure that ``copy-image`` is included"},{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_daac04a1","line":218,"range":{"start_line":218,"start_character":43,"end_line":218,"end_character":47},"updated":"2020-07-24 13:34:48.000000000","message":"do","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":215,"context_line":"For the ``copy-image`` method, make sure that ``copy-image`` is included"},{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_cb571901","line":218,"range":{"start_line":218,"start_character":43,"end_line":218,"end_character":47},"in_reply_to":"bf51134e_daac04a1","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":215,"context_line":"For the ``copy-image`` method, make sure that ``copy-image`` is included"},{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_2b405535","line":218,"range":{"start_line":218,"start_character":8,"end_line":218,"end_character":17},"in_reply_to":"bf51134e_fab0e8df","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_3aa1c096","line":219,"range":{"start_line":219,"start_character":41,"end_line":219,"end_character":51},"updated":"2020-07-24 13:34:48.000000000","message":"The default is role:admin. I think you want to either just say something generic here like \"To allow copy-image operation to be performed by users on images they do not own, you can set the copy_image policy to something other than the default.\"\n\nIf you want an example, I think using the is_public one I have for the nova job would be most likely to be useful:\n\n \"\u0027public\u0027:%(visibility)s\"","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_7a9df864","line":219,"range":{"start_line":219,"start_character":13,"end_line":219,"end_character":16},"updated":"2020-07-24 13:34:48.000000000","message":"set the","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_1a8e7c31","line":219,"range":{"start_line":219,"start_character":0,"end_line":219,"end_character":8},"updated":"2020-07-24 13:34:48.000000000","message":"the operator","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_eb6bfdb5","line":219,"range":{"start_line":219,"start_character":0,"end_line":219,"end_character":8},"in_reply_to":"bf51134e_1a8e7c31","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_2b21754e","line":219,"range":{"start_line":219,"start_character":41,"end_line":219,"end_character":51},"in_reply_to":"bf51134e_3aa1c096","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":216,"context_line":"in the list specified by your ``enabled_import_methods`` setting as well"},{"line_number":217,"context_line":"as you have multiple glance backends configured in your environment. To"},{"line_number":218,"context_line":"allow ``copy-mage`` operation to users who does not own the image,"},{"line_number":219,"context_line":"operator can set `copy_image` policy to `role:admin` in policy.json file."},{"line_number":220,"context_line":""},{"line_number":221,"context_line":".. _iir_plugins:"},{"line_number":222,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_abc62515","line":219,"range":{"start_line":219,"start_character":13,"end_line":219,"end_character":16},"in_reply_to":"bf51134e_7a9df864","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":226,"context_line":"into multiple stores using interoperable image import workflow."},{"line_number":227,"context_line":""},{"line_number":228,"context_line":"Basically user will be able to copy only those images which are either"},{"line_number":229,"context_line":"owned by him or shared with him. Unless the copying of unowned images"},{"line_number":230,"context_line":"are allowed by cloud operator by enforcing policy check, user will"},{"line_number":231,"context_line":"be get Forbidden (Operation not permitted response) for such copy"},{"line_number":232,"context_line":"operations. Even if copying of unowned images is allowed by enforcing"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_fae588dd","line":229,"range":{"start_line":229,"start_character":13,"end_line":229,"end_character":31},"updated":"2020-07-24 13:34:48.000000000","message":"I don\u0027t think this is true by default, is it? Or do you mean \"the most you can grant is copy permission to images the user can see?\"","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":226,"context_line":"into multiple stores using interoperable image import workflow."},{"line_number":227,"context_line":""},{"line_number":228,"context_line":"Basically user will be able to copy only those images which are either"},{"line_number":229,"context_line":"owned by him or shared with him. Unless the copying of unowned images"},{"line_number":230,"context_line":"are allowed by cloud operator by enforcing policy check, user will"},{"line_number":231,"context_line":"be get Forbidden (Operation not permitted response) for such copy"},{"line_number":232,"context_line":"operations. Even if copying of unowned images is allowed by enforcing"}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_6b17edef","line":229,"range":{"start_line":229,"start_character":13,"end_line":229,"end_character":31},"in_reply_to":"bf51134e_fae588dd","updated":"2020-07-24 15:07:45.000000000","message":"right, will correct it.","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":228,"context_line":"Basically user will be able to copy only those images which are either"},{"line_number":229,"context_line":"owned by him or shared with him. Unless the copying of unowned images"},{"line_number":230,"context_line":"are allowed by cloud operator by enforcing policy check, user will"},{"line_number":231,"context_line":"be get Forbidden (Operation not permitted response) for such copy"},{"line_number":232,"context_line":"operations. Even if copying of unowned images is allowed by enforcing"},{"line_number":233,"context_line":"policy, ownership of the image remains unchanged."},{"line_number":234,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_3acf0058","line":231,"range":{"start_line":231,"start_character":0,"end_line":231,"end_character":3},"updated":"2020-07-24 13:34:48.000000000","message":"s/be//","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":228,"context_line":"Basically user will be able to copy only those images which are either"},{"line_number":229,"context_line":"owned by him or shared with him. Unless the copying of unowned images"},{"line_number":230,"context_line":"are allowed by cloud operator by enforcing policy check, user will"},{"line_number":231,"context_line":"be get Forbidden (Operation not permitted response) for such copy"},{"line_number":232,"context_line":"operations. Even if copying of unowned images is allowed by enforcing"},{"line_number":233,"context_line":"policy, ownership of the image remains unchanged."},{"line_number":234,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_0bcd915c","line":231,"range":{"start_line":231,"start_character":0,"end_line":231,"end_character":3},"in_reply_to":"bf51134e_3acf0058","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":4393,"name":"Dan Smith","email":"dms@danplanet.com","username":"danms"},"change_message_id":"b51f1415be0d806415cf65a7243c09e4acf64f5f","unresolved":false,"context_lines":[{"line_number":247,"context_line":"and then import processing will be continued using import workflow as"},{"line_number":248,"context_line":"explained in below ``Importing in multiple stores`` section."},{"line_number":249,"context_line":""},{"line_number":250,"context_line":""},{"line_number":251,"context_line":"Importing in multiple stores"},{"line_number":252,"context_line":"----------------------------"},{"line_number":253,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_ba04b07f","line":250,"updated":"2020-07-24 13:34:48.000000000","message":"Whitespace damage here.","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"change_message_id":"219923c4d60838bcbe0e345ad7d605f25edba29c","unresolved":false,"context_lines":[{"line_number":247,"context_line":"and then import processing will be continued using import workflow as"},{"line_number":248,"context_line":"explained in below ``Importing in multiple stores`` section."},{"line_number":249,"context_line":""},{"line_number":250,"context_line":""},{"line_number":251,"context_line":"Importing in multiple stores"},{"line_number":252,"context_line":"----------------------------"},{"line_number":253,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"bf51134e_6b440db9","line":250,"in_reply_to":"bf51134e_ba04b07f","updated":"2020-07-24 15:07:45.000000000","message":"Done","commit_id":"9566d6acaf870ef6bf6c4ffab80c60d040886b17"},{"author":{"_account_id":5314,"name":"Brian Rosmaita","email":"rosmaita.fossdev@gmail.com","username":"brian-rosmaita"},"change_message_id":"5f41b7c2c9071c615fd92ad615a93cffd2fc07fe","unresolved":false,"context_lines":[{"line_number":231,"context_line":"Basically user will be able to copy only those images which are"},{"line_number":232,"context_line":"owned by him. Unless the copying of unowned images are allowed by"},{"line_number":233,"context_line":"cloud operator by enforcing policy check, user will get Forbidden"},{"line_number":234,"context_line":"(Operation not permitted response) for such copy operations. Even if"},{"line_number":235,"context_line":"copying of unowned images is allowed by enforcing policy, ownership of"},{"line_number":236,"context_line":"the image remains unchanged."},{"line_number":237,"context_line":""},{"line_number":238,"context_line":"Operator or end user can either copy the existing image by specifying"},{"line_number":239,"context_line":"``all_stores`` as True in request body or by passing list of desired"}],"source_content_type":"text/x-rst","patch_set":2,"id":"9f560f44_3294af44","line":236,"range":{"start_line":234,"start_character":61,"end_line":236,"end_character":28},"updated":"2020-07-27 13:52:22.000000000","message":"This is a good point to make.","commit_id":"1d47a6800ac6e5fb011aa5356cbc75b62489af94"}]}