)]}'
{"id":"openstack%2Fglance~802526","triplet_id":"openstack%2Fglance~master~I52e9fbe5ef0e7c3021076d84e9b3df89012c45b9","project":"openstack/glance","branch":"master","topic":"policy-refactor","hashtags":[],"change_id":"I52e9fbe5ef0e7c3021076d84e9b3df89012c45b9","subject":"PoC Move member policy checks to API layer","status":"ABANDONED","created":"2021-07-27 13:32:55.000000000","updated":"2021-07-30 14:40:43.000000000","total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"42947eb71e60b935d2411de01d23f9cd60a0057c","_number":802526,"virtual_id_number":802526,"owner":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"actions":{},"labels":{"Verified":{"disliked":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"all":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"tag":"autogenerated:zuul:check","value":-1,"date":"2021-07-28 19:21:04.000000000","permitted_voting_range":{"min":-2,"max":2},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","value":-1,"default_value":0,"optional":true},"Code-Review":{"all":[{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"value":0,"permitted_voting_range":{"min":-1,"max":1},"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","default_value":0,"optional":true},"Workflow":{"all":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true},"Review-Priority":{"all":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"values":{"-1":"Branch Freeze"," 0":"No Priority","+1":"Important Change","+2":"Top Priority / Holds Gate"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]}],"CC":[{"_account_id":9008,"name":"VMware NSX CI","username":"vmwareminesweeper","tags":["SERVICE_USER"]}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2021-07-27 15:05:11.000000000","updated_by":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"reviewer":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"state":"REVIEWER"},{"updated":"2021-07-28 10:47:55.000000000","updated_by":{"_account_id":9008,"name":"VMware NSX CI","username":"vmwareminesweeper","tags":["SERVICE_USER"]},"reviewer":{"_account_id":9008,"name":"VMware NSX CI","username":"vmwareminesweeper","tags":["SERVICE_USER"]},"state":"CC"},{"updated":"2021-07-29 09:34:13.000000000","updated_by":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"reviewer":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"state":"REVIEWER"}],"messages":[{"id":"00d11ba29cb38224755c907f70cf3f5a6b66b182","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"date":"2021-07-27 13:32:55.000000000","message":"Uploaded patch set 1.","accounts_in_message":[],"_revision_number":1},{"id":"78b32a73d38cd04e54574966374cb9d4f4ac0453","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-07-27 15:05:11.000000000","message":"Patch Set 1: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- grenade https://zuul.opendev.org/t/openstack/build/1d1bf326b0694b0c80798200813ffa4c : SUCCESS in 1h 02m 28s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/2263435e3feb49929dfc06da9999c3b4 : SUCCESS in 1h 03m 58s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/36ca23a33ed147df9dc55d8eaabe1936 : SUCCESS in 5m 22s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/bcfa2ca2a9ae4fd9bc31cc1e084af8e2 : SUCCESS in 5m 48s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/4f91c7eeb4f5477dafc8bc35f194db35 : SUCCESS in 6m 01s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/20da757206fd41d6b930ce912a752432 : SUCCESS in 7m 18s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/b4159c6efae6420c99cb62ba903f4ecb : SUCCESS in 7m 24s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/ac5e92788c3f4d9b83c3d3be5dc9aeaa : SUCCESS in 8m 34s\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/8e61e3efde4449869b7b16c8b435acee : SUCCESS in 8m 50s\n- glance-tox-functional-py38-rbac-defaults https://zuul.opendev.org/t/openstack/build/14bce3f8575c4b7f9263333b08586430 : FAILURE in 8m 13s (non-voting)\n- glance-code-constants-check https://zuul.opendev.org/t/openstack/build/c383e53f0a9a431fb1c43d7d5b4f84f8 : SUCCESS in 5m 17s\n- glance-ceph-thin-provisioning https://zuul.opendev.org/t/openstack/build/ccf8ba394f82473ebd282e4dc57a3771 : SUCCESS in 1h 14m 30s (non-voting)\n- tempest-integrated-storage-import https://zuul.opendev.org/t/openstack/build/f3606c84a9e64b60a463a2f4b55ace9b : SUCCESS in 1h 09m 16s\n- tempest-integrated-storage-import-standalone https://zuul.opendev.org/t/openstack/build/d4f56e9b28934b978b860e70d24f5330 : SUCCESS in 1h 27m 18s\n- glance-multistore-cinder-import https://zuul.opendev.org/t/openstack/build/31a88ed49b9746048ebb5ed895e4f384 : SUCCESS in 1h 24m 17s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/d01d6a48b5534daf9e9aed21d862c61e : SUCCESS in 49m 09s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/24e40b776374484798896c163169ba84 : SUCCESS in 1h 10m 22s\n- glance-secure-rbac-protection-functional https://zuul.opendev.org/t/openstack/build/279fa10ab3a74b23abd6023608431ca7 : FAILURE in 28m 21s","accounts_in_message":[],"_revision_number":1},{"id":"3737f7186a16ed873b939b8d8f555f11222252b2","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"date":"2021-07-28 07:10:55.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"30eee42ce4c88688dc1550da3d7615c90c03d8c7","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-07-28 08:36:33.000000000","message":"Patch Set 2: Verified+1\n\nBuild succeeded (check pipeline).\n\n- grenade https://zuul.opendev.org/t/openstack/build/9bb2688e9bda4da0a73712c3a6e3c114 : SUCCESS in 1h 09m 34s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/1c23bbc9fca74304ab9f061d6369e5e3 : SUCCESS in 1h 12m 59s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/aa9cc061485f4d9f99aa12957fb5d50c : SUCCESS in 5m 53s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/7ee0cfb3f98b4f4fb2f788c3e06e1f13 : SUCCESS in 6m 22s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/17fb6003c7e948d8993fcb2b694edb64 : SUCCESS in 6m 37s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/2bbdf3e65eeb452cbb61e84c0039ddbf : SUCCESS in 7m 24s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/cea11dbbb6874bc69580f2df06ce1f1a : SUCCESS in 6m 52s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/35099d9d09f44086a3386c2312bb3ad2 : SUCCESS in 9m 48s\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/50c772ead4b54a4fb4e7ff600c17dc7a : SUCCESS in 7m 59s\n- glance-tox-functional-py38-rbac-defaults https://zuul.opendev.org/t/openstack/build/617e871f7eb44428a94abb8de2f9a8a0 : FAILURE in 14m 45s (non-voting)\n- glance-code-constants-check https://zuul.opendev.org/t/openstack/build/46d2cd5153d244c7a103876583608fcc : SUCCESS in 5m 27s\n- glance-ceph-thin-provisioning https://zuul.opendev.org/t/openstack/build/05f647a61d464b6eac7bd22c315460f4 : SUCCESS in 1h 14m 01s (non-voting)\n- tempest-integrated-storage-import https://zuul.opendev.org/t/openstack/build/4a166fcbd5d142e593a2a31fd5fabd63 : SUCCESS in 1h 02m 29s\n- tempest-integrated-storage-import-standalone https://zuul.opendev.org/t/openstack/build/ffa2f85c5e3a4f38a063335208caa9c1 : SUCCESS in 1h 02m 54s\n- glance-multistore-cinder-import https://zuul.opendev.org/t/openstack/build/13c06a9f3eb743acbae71bfa7938d2f9 : FAILURE in 1h 03m 58s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/66f83cc330d24a3ebc7bdbfff8d3bc48 : SUCCESS in 45m 32s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/4dc7150090d14c70a0b557536f9a8017 : SUCCESS in 1h 23m 55s\n- glance-secure-rbac-protection-functional https://zuul.opendev.org/t/openstack/build/84d0d59407c04293bfc67ddbf8635487 : SUCCESS in 34m 21s","accounts_in_message":[],"_revision_number":2},{"id":"d2af6f398e6d9bcac5c53516b7f592196b617f9b","author":{"_account_id":9008,"name":"VMware NSX CI","username":"vmwareminesweeper","tags":["SERVICE_USER"]},"date":"2021-07-28 10:47:55.000000000","message":"Patch Set 2:\n\nBuild succeeded\n\n- dsvm-glance http://207.189.188.190/logs/802526/802526/2/check-not-vote/ext-glance-zuul/a5fccc9 : SUCCESS in 30m 31s","accounts_in_message":[],"_revision_number":2},{"id":"fc42527cbfc19951ad66072454078c62a5134eee","tag":"autogenerated:gerrit:newPatchSet","author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"date":"2021-07-28 17:47:36.000000000","message":"Uploaded patch set 3.","accounts_in_message":[],"_revision_number":3},{"id":"3d8912fcd709648ec9df247d1404dce5a09ae5b0","tag":"autogenerated:zuul:check","author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"date":"2021-07-28 19:21:04.000000000","message":"Patch Set 3: Verified-1\n\nBuild failed (check pipeline).  For information on how to proceed, see\nhttps://docs.opendev.org/opendev/infra-manual/latest/developers.html#automated-testing\n\n\n- grenade https://zuul.opendev.org/t/openstack/build/4b9a2d3d2d51425c8cd52bb24db47b24 : SUCCESS in 58m 29s\n- tempest-integrated-storage https://zuul.opendev.org/t/openstack/build/b87602c3461c460f98f3653bbba2bfa8 : SUCCESS in 1h 31m 23s\n- openstack-tox-pep8 https://zuul.opendev.org/t/openstack/build/8aadbc38c3304ccc855e9e37301e4f96 : SUCCESS in 5m 09s\n- openstack-tox-py36 https://zuul.opendev.org/t/openstack/build/de826c9ab6c84f9c929ed464ea5836f0 : SUCCESS in 5m 18s\n- openstack-tox-py38 https://zuul.opendev.org/t/openstack/build/9f2ec20e033d4eafb4e49af2f515447b : SUCCESS in 5m 45s\n- openstack-tox-py39 https://zuul.opendev.org/t/openstack/build/a668e3e5beb94d39bf19f38b5ee860d4 : SUCCESS in 6m 34s (non-voting)\n- openstack-tox-docs https://zuul.opendev.org/t/openstack/build/37feb0e5d98d41d59828ba2d4e1f892e : SUCCESS in 7m 30s\n- openstack-tox-functional-py36 https://zuul.opendev.org/t/openstack/build/b9d8268facf04fc499703bbbfee908ba : FAILURE in 11m 36s\n- openstack-tox-functional-py38 https://zuul.opendev.org/t/openstack/build/331a83d6ca4d4c09899c32fa6f7cb03e : SUCCESS in 9m 08s\n- glance-tox-functional-py38-rbac-defaults https://zuul.opendev.org/t/openstack/build/dd1081cdfb4c4e818953875103eb3375 : SUCCESS in 9m 10s (non-voting)\n- glance-code-constants-check https://zuul.opendev.org/t/openstack/build/5d434d1263bc4ed6a36b0ad843118c0a : SUCCESS in 5m 09s\n- glance-ceph-thin-provisioning https://zuul.opendev.org/t/openstack/build/2eac37c687b84a0d9c344df0c0135ead : SUCCESS in 1h 13m 40s (non-voting)\n- tempest-integrated-storage-import https://zuul.opendev.org/t/openstack/build/e288351ad1284b61b8350f74ea972004 : SUCCESS in 1h 06m 23s\n- tempest-integrated-storage-import-standalone https://zuul.opendev.org/t/openstack/build/b8121d7922844000934e8de0d28bf6b0 : SUCCESS in 1h 23m 30s\n- glance-multistore-cinder-import https://zuul.opendev.org/t/openstack/build/76f0a60182a44da0a645b965a5e176ec : SUCCESS in 1h 20m 01s (non-voting)\n- tempest-ipv6-only https://zuul.opendev.org/t/openstack/build/66f4b7d827824bcb9cd0d2c426993fbd : SUCCESS in 48m 08s\n- nova-ceph-multistore https://zuul.opendev.org/t/openstack/build/b3a1de3cdcc6454988c3056fbe3ee886 : SUCCESS in 1h 11m 56s\n- glance-secure-rbac-protection-functional https://zuul.opendev.org/t/openstack/build/c636f6a5c90b4f189ae26fbd5ed140d9 : SUCCESS in 37m 19s","accounts_in_message":[],"_revision_number":3},{"id":"42947eb71e60b935d2411de01d23f9cd60a0057c","tag":"autogenerated:gerrit:abandon","author":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"date":"2021-07-30 14:40:43.000000000","message":"Abandoned","accounts_in_message":[],"_revision_number":3}],"current_revision_number":3,"current_revision":"11bda84da77b3e0a7272c431f2ab4f385cdf61d1","revisions":{"b18170d7da8baa30bc1a9f047094d2c994a21ded":{"kind":"REWORK","_number":1,"created":"2021-07-27 13:32:55.000000000","uploader":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"ref":"refs/changes/26/802526/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/glance","ref":"refs/changes/26/802526/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/glance refs/changes/26/802526/1"}}},"commit":{"parents":[{"commit":"8cf9d7f0f32fb404b871828060354a0873c55a14","subject":"Refactor gateway auth layer for member APIs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/8cf9d7f0f32fb404b871828060354a0873c55a14"}]}],"author":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-27 09:05:01.000000000","tz":0},"committer":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-27 13:30:40.000000000","tz":0},"subject":"PoC Move member policy checks to API layer","message":"PoC Move member policy checks to API layer\n\nThis change enforce member policy checks in API layer and disables\nread-only checks at auth layer and disables policy layer as well.\n\nToDo:\n1. Need to make this patch dependent on image policy refactoring (get_image)\n2. Carefully verify read only checks at auth layer vs secure RBAC policy\n3. Provide additional test coverage\n\nPartially implements: blueprint policy-refactor\nChange-Id: I52e9fbe5ef0e7c3021076d84e9b3df89012c45b9\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/b18170d7da8baa30bc1a9f047094d2c994a21ded"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/b18170d7da8baa30bc1a9f047094d2c994a21ded"}]},"branch":"refs/heads/master"},"1465e126ef1e9cc24b63ee92cb301feb5bd7053d":{"kind":"REWORK","_number":2,"created":"2021-07-28 07:10:55.000000000","uploader":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"ref":"refs/changes/26/802526/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/glance","ref":"refs/changes/26/802526/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/glance refs/changes/26/802526/2"}}},"commit":{"parents":[{"commit":"8cf9d7f0f32fb404b871828060354a0873c55a14","subject":"Refactor gateway auth layer for member APIs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/8cf9d7f0f32fb404b871828060354a0873c55a14"}]}],"author":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-27 09:05:01.000000000","tz":0},"committer":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-28 07:08:23.000000000","tz":0},"subject":"PoC Move member policy checks to API layer","message":"PoC Move member policy checks to API layer\n\nThis change enforce member policy checks in API layer and disables\nread-only checks at auth layer and disables policy layer as well.\n\nToDo:\n1. Need to make this patch dependent on image policy refactoring (get_image)\n2. Carefully verify read only checks at auth layer vs secure RBAC policy\n3. Provide additional test coverage\n\nPartially implements: blueprint policy-refactor\nChange-Id: I52e9fbe5ef0e7c3021076d84e9b3df89012c45b9\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/1465e126ef1e9cc24b63ee92cb301feb5bd7053d"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/1465e126ef1e9cc24b63ee92cb301feb5bd7053d"}]},"branch":"refs/heads/master"},"11bda84da77b3e0a7272c431f2ab4f385cdf61d1":{"kind":"REWORK","_number":3,"created":"2021-07-28 17:47:36.000000000","uploader":{"_account_id":9303,"name":"Abhishek Kekane","email":"akekane@redhat.com","username":"abhishekkekane"},"ref":"refs/changes/26/802526/3","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/glance","ref":"refs/changes/26/802526/3","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/3 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/3 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/glance refs/changes/26/802526/3 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/glance refs/changes/26/802526/3"}}},"commit":{"parents":[{"commit":"b287daf22f56c81266b55d32ec03e27918f39bb4","subject":"Refactor gateway auth layer for member APIs","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/b287daf22f56c81266b55d32ec03e27918f39bb4"}]}],"author":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-27 09:05:01.000000000","tz":0},"committer":{"name":"Abhishek Kekane","email":"akekane@redhat.com","date":"2021-07-28 17:45:30.000000000","tz":0},"subject":"PoC Move member policy checks to API layer","message":"PoC Move member policy checks to API layer\n\nThis change enforce member policy checks in API layer and disables\nread-only checks at auth layer and disables policy layer as well.\n\nToDo:\n1. Need to make this patch dependent on image policy refactoring (get_image)\n2. Carefully verify read only checks at auth layer vs secure RBAC policy\n3. Provide additional test coverage\n\nPartially implements: blueprint policy-refactor\nChange-Id: I52e9fbe5ef0e7c3021076d84e9b3df89012c45b9\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/11bda84da77b3e0a7272c431f2ab4f385cdf61d1"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/glance/commit/11bda84da77b3e0a7272c431f2ab4f385cdf61d1"}]},"branch":"refs/heads/master"}},"requirements":[],"submit_records":[],"submit_requirements":[]}