)]}'
{"etc/gnocchi/policy.json":[{"author":{"_account_id":7478,"name":"Nadya Shakhat","email":"nadmi4@gmail.com","username":"nprivalova"},"change_message_id":"d740bc5cab241658a8c3af7daa6f65ce446d6b8d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_a4a702bc","line":3,"updated":"2014-11-24 20:27:47.000000000","message":"Why \u0027delete entity\u0027 and \u0027post measures\u0027 have different rules? They both change entries in db...Admin can delete entity but cannot post measures, is it expected?","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":2284,"name":"Eoghan Glynn","email":"eglynn@redhat.com","username":"eglynn"},"change_message_id":"d7fcbb02414d714bd3f7d122ffa88ce294a65e86","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_7c11925c","line":3,"in_reply_to":"5a890539_45cc2e8b","updated":"2014-12-01 14:29:15.000000000","message":"Just to clarify ... once we have the full created_by_* logic in place (i.e. including https://review.openstack.org/137802), we should be able to change this delete rule to be something like:\n\n  \"role:admin or created_by_project_id:%(project_id)s\"","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":1669,"name":"Julien Danjou","display_name":"jd","email":"julien@danjou.info","username":"jdanjou"},"change_message_id":"1e07f9af63a0d06da9b3648081bb816a0ce028e8","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_ea62a33c","line":3,"in_reply_to":"5a890539_58a4824a","updated":"2014-11-25 09:54:25.000000000","message":"Well, that\u0027s a good question that we need to resolve. For now, with or without the policy, any user can manage (create/delete/update) its own resources and entities… So for billing this is going to be a problem anyway with no link to this patch.","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":1669,"name":"Julien Danjou","display_name":"jd","email":"julien@danjou.info","username":"jdanjou"},"change_message_id":"6ab01932db61158832b46f8a2a27e17f8fdea147","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_727b7b7b","line":3,"in_reply_to":"5a890539_7c11925c","updated":"2014-12-01 14:57:35.000000000","message":"This is exactly what https://review.openstack.org/#/c/136272/ does.","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":2284,"name":"Eoghan Glynn","email":"eglynn@redhat.com","username":"eglynn"},"change_message_id":"6b307eb9a9813f8211d8b6ecf9b85d2de330d691","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_58a4824a","line":3,"in_reply_to":"5a890539_a4a702bc","updated":"2014-11-24 21:44:26.000000000","message":"I think the idea is that opening up post_measures provides a potential surface for a DoS attack.\n\nHowever, from a billing PoV allowing a non-admin user to completely delete an entity associated with their own resource is perhaps a bad idea?\n\n(as that could make billing for the resource usage impossible)","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":2284,"name":"Eoghan Glynn","email":"eglynn@redhat.com","username":"eglynn"},"change_message_id":"f807e9460b63941c76d3fa5d2409a02df77e9bfe","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_f70a3478","line":3,"in_reply_to":"5a890539_ea62a33c","updated":"2014-11-27 14:53:35.000000000","message":"So should the rule for delete entity simply be:\n\n  \"delete entity\": \"rule:admin\"\n\nin the out-of-the-box default case?","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"},{"author":{"_account_id":1669,"name":"Julien Danjou","display_name":"jd","email":"julien@danjou.info","username":"jdanjou"},"change_message_id":"cf68f4af72f6a05a10dd62b0174d05687375b7ad","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"admin_or_owner\": \"role:admin or project_id:%(project_id)s\","},{"line_number":3,"context_line":""},{"line_number":4,"context_line":"    \"delete entity\": \"rule:admin_or_owner\","},{"line_number":5,"context_line":"    \"get measures\":  \"rule:admin_or_owner\","},{"line_number":6,"context_line":"    \"post measures\":  \"project_id:%(project_id)s\""}],"source_content_type":"application/json","patch_set":3,"id":"5a890539_45cc2e8b","line":3,"in_reply_to":"5a890539_f70a3478","updated":"2014-11-27 15:54:56.000000000","message":"Bah whatever we do, until we have created_by_* is going to break a use case.","commit_id":"76a7e4ff724031e7be18e56559259084e9e62195"}]}