)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"36d709240b31f760f1b939514edfe629013afccf","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"d01299c6_beb4051f","updated":"2024-04-05 19:36:59.000000000","message":"to be discussed in PTG first https://etherpad.opendev.org/p/rbac-2024.2-ptg","commit_id":"0d949c56fb06606771e7110d5d049e0dda4743df"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"be00772bd4b8868b0555dadf59353c4a59828f34","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"5fa455bf_03f3049e","updated":"2024-05-01 01:04:24.000000000","message":"Thanks Ghanshyam!\nMaking this progress allows projects to remove deprecated rule definitions that they have been lugging along for many releases now.","commit_id":"91bb622fed1da11b3a430370119b6c1963037a76"},{"author":{"_account_id":16643,"name":"Goutham Pacha Ravi","email":"gouthampravi@gmail.com","username":"gouthamr"},"change_message_id":"b19e7f039234d401b0869d4f047dd35fd95c2347","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":3,"id":"668738a2_0c62d417","updated":"2024-05-07 17:53:49.000000000","message":"The last update was posted a week ago; and there has been no objection; lets get this moving so teams can prioritize the work items sooner in the cycle.","commit_id":"91bb622fed1da11b3a430370119b6c1963037a76"}],"goals/selected/consistent-and-secure-rbac.rst":[{"author":{"_account_id":11975,"name":"Slawek Kaplonski","email":"skaplons@redhat.com","username":"slaweq"},"change_message_id":"7af8e02643b3dc3d8f57d902632fc1df16339fe8","unresolved":true,"context_lines":[{"line_number":823,"context_line":""},{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete all the Phases. we"},{"line_number":827,"context_line":"   can update the default value of config option ``enforce_new_defaults`` in"},{"line_number":828,"context_line":"   oslo.policy to True. This will allow each service to remove code to"},{"line_number":829,"context_line":"   override the ``enforce_new_defaults\u003dTrue`` and use the upstream default"}],"source_content_type":"text/x-rst","patch_set":1,"id":"f6406c8c_ee9f2fa7","line":826,"range":{"start_line":826,"start_character":60,"end_line":826,"end_character":74},"updated":"2024-04-08 14:22:21.000000000","message":"what do you mean by \"all the phases\"? I know that for example Neutron still didn\u0027t even started last phase which, IIRC is about to implement support for the Manager role.","commit_id":"0d949c56fb06606771e7110d5d049e0dda4743df"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"2e5cdbb6810f1cc37427327f10ce66ef3868fc3f","unresolved":false,"context_lines":[{"line_number":823,"context_line":""},{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete all the Phases. we"},{"line_number":827,"context_line":"   can update the default value of config option ``enforce_new_defaults`` in"},{"line_number":828,"context_line":"   oslo.policy to True. This will allow each service to remove code to"},{"line_number":829,"context_line":"   override the ``enforce_new_defaults\u003dTrue`` and use the upstream default"}],"source_content_type":"text/x-rst","patch_set":1,"id":"62a6fc26_e896fc08","line":826,"range":{"start_line":826,"start_character":60,"end_line":826,"end_character":74},"in_reply_to":"f6406c8c_ee9f2fa7","updated":"2024-04-18 22:31:13.000000000","message":"I think I should say phase 1 where the scope things were implemented and this flag was used for migration purpose.","commit_id":"0d949c56fb06606771e7110d5d049e0dda4743df"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"bde19c27116bb1cd618a88693a9d770e33d45a95","unresolved":true,"context_lines":[{"line_number":823,"context_line":""},{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete `Phase 1`_ and"},{"line_number":827,"context_line":"   enabled the ``enforce_new_defaults`` flag at service level. Now we can"},{"line_number":828,"context_line":"   update the default value of config option ``enforce_new_defaults`` in"},{"line_number":829,"context_line":"   oslo.policy to True (means enable it by default at oslo policy level"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ca835f8f_92cdda8c","line":826,"range":{"start_line":826,"start_character":22,"end_line":826,"end_character":25},"updated":"2024-04-22 10:52:01.000000000","message":"not needed?","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c1d9499a7b861eb4a6a2fc4286b3ef211f42ed7b","unresolved":false,"context_lines":[{"line_number":823,"context_line":""},{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete `Phase 1`_ and"},{"line_number":827,"context_line":"   enabled the ``enforce_new_defaults`` flag at service level. Now we can"},{"line_number":828,"context_line":"   update the default value of config option ``enforce_new_defaults`` in"},{"line_number":829,"context_line":"   oslo.policy to True (means enable it by default at oslo policy level"}],"source_content_type":"text/x-rst","patch_set":2,"id":"ceca2714_c157e3e9","line":826,"range":{"start_line":826,"start_character":22,"end_line":826,"end_character":25},"in_reply_to":"ca835f8f_92cdda8c","updated":"2024-04-30 02:50:51.000000000","message":"Done","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"bde19c27116bb1cd618a88693a9d770e33d45a95","unresolved":true,"context_lines":[{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete `Phase 1`_ and"},{"line_number":827,"context_line":"   enabled the ``enforce_new_defaults`` flag at service level. Now we can"},{"line_number":828,"context_line":"   update the default value of config option ``enforce_new_defaults`` in"},{"line_number":829,"context_line":"   oslo.policy to True (means enable it by default at oslo policy level"},{"line_number":830,"context_line":"   and service can disable it if they still need more time). This will allow"}],"source_content_type":"text/x-rst","patch_set":2,"id":"56d4e867_3282228c","line":827,"range":{"start_line":827,"start_character":3,"end_line":827,"end_character":61},"updated":"2024-04-22 10:52:01.000000000","message":"`have the enforce_new_defaults flag enabled at service level`?","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c1d9499a7b861eb4a6a2fc4286b3ef211f42ed7b","unresolved":false,"context_lines":[{"line_number":824,"context_line":"#. Update oslo.policy ``enforce_new_defaults\u003dTrue``"},{"line_number":825,"context_line":""},{"line_number":826,"context_line":"   At this stage, all the services are supposed to complete `Phase 1`_ and"},{"line_number":827,"context_line":"   enabled the ``enforce_new_defaults`` flag at service level. Now we can"},{"line_number":828,"context_line":"   update the default value of config option ``enforce_new_defaults`` in"},{"line_number":829,"context_line":"   oslo.policy to True (means enable it by default at oslo policy level"},{"line_number":830,"context_line":"   and service can disable it if they still need more time). This will allow"}],"source_content_type":"text/x-rst","patch_set":2,"id":"024c7ed1_1ae6c204","line":827,"range":{"start_line":827,"start_character":3,"end_line":827,"end_character":61},"in_reply_to":"56d4e867_3282228c","updated":"2024-04-30 02:50:51.000000000","message":"Done","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"bde19c27116bb1cd618a88693a9d770e33d45a95","unresolved":true,"context_lines":[{"line_number":830,"context_line":"   and service can disable it if they still need more time). This will allow"},{"line_number":831,"context_line":"   each service to remove code to override the ``enforce_new_defaults\u003dTrue``"},{"line_number":832,"context_line":"   and use the upstream default from oslo.policy. If any service still needs"},{"line_number":833,"context_line":"   to keep the default as False then they can do it by overriding the default."},{"line_number":834,"context_line":""},{"line_number":835,"context_line":"#. Update oslo.policy ``enforce_scope\u003dTrue``"},{"line_number":836,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"8344c98c_c9e7a6c5","line":833,"range":{"start_line":833,"start_character":15,"end_line":833,"end_character":22},"updated":"2024-04-22 10:52:01.000000000","message":"`value`? But pretty much same statement is explained inside brackets previously...","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c1d9499a7b861eb4a6a2fc4286b3ef211f42ed7b","unresolved":false,"context_lines":[{"line_number":830,"context_line":"   and service can disable it if they still need more time). This will allow"},{"line_number":831,"context_line":"   each service to remove code to override the ``enforce_new_defaults\u003dTrue``"},{"line_number":832,"context_line":"   and use the upstream default from oslo.policy. If any service still needs"},{"line_number":833,"context_line":"   to keep the default as False then they can do it by overriding the default."},{"line_number":834,"context_line":""},{"line_number":835,"context_line":"#. Update oslo.policy ``enforce_scope\u003dTrue``"},{"line_number":836,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1e8e1daa_f380d249","line":833,"range":{"start_line":833,"start_character":15,"end_line":833,"end_character":22},"in_reply_to":"8344c98c_c9e7a6c5","updated":"2024-04-30 02:50:51.000000000","message":"Done. I removed the one in brackets.","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":28619,"name":"Dmitriy Rabotyagov","email":"noonedeadpunk@gmail.com","username":"noonedeadpunk"},"change_message_id":"bde19c27116bb1cd618a88693a9d770e33d45a95","unresolved":true,"context_lines":[{"line_number":839,"context_line":"   the default value of config option ``enforce_scope`` in oslo.policy to True."},{"line_number":840,"context_line":"   This will allow each service to remove code to override the"},{"line_number":841,"context_line":"   ``enforce_scope\u003dTrue`` and use the upstream default from oslo.policy. If"},{"line_number":842,"context_line":"   any service still needs to keep the default as False then they can do it by"},{"line_number":843,"context_line":"   overriding the default."},{"line_number":844,"context_line":""},{"line_number":845,"context_line":"2025.2-Release Timeline"}],"source_content_type":"text/x-rst","patch_set":2,"id":"956fbdc3_ecd77e81","line":842,"range":{"start_line":842,"start_character":39,"end_line":842,"end_character":46},"updated":"2024-04-22 10:52:01.000000000","message":"`value`?","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c1d9499a7b861eb4a6a2fc4286b3ef211f42ed7b","unresolved":false,"context_lines":[{"line_number":839,"context_line":"   the default value of config option ``enforce_scope`` in oslo.policy to True."},{"line_number":840,"context_line":"   This will allow each service to remove code to override the"},{"line_number":841,"context_line":"   ``enforce_scope\u003dTrue`` and use the upstream default from oslo.policy. If"},{"line_number":842,"context_line":"   any service still needs to keep the default as False then they can do it by"},{"line_number":843,"context_line":"   overriding the default."},{"line_number":844,"context_line":""},{"line_number":845,"context_line":"2025.2-Release Timeline"}],"source_content_type":"text/x-rst","patch_set":2,"id":"d5014b7c_8f61e61e","line":842,"range":{"start_line":842,"start_character":39,"end_line":842,"end_character":46},"in_reply_to":"956fbdc3_ecd77e81","updated":"2024-04-30 02:50:51.000000000","message":"Done","commit_id":"e71be18b617825395e5dbf8e6a34e850dfa5fbcc"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"d0edcb4cd434942616f4af505d9502318d1ece28","unresolved":true,"context_lines":[{"line_number":844,"context_line":"2025.2-Release Timeline"},{"line_number":845,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":846,"context_line":""},{"line_number":847,"context_line":"#. Remove the oslo.policy ``enforce_scope`` config flag"},{"line_number":848,"context_line":""},{"line_number":849,"context_line":"   The config option ``enforce_scope``  was added temporarily to migrate to"},{"line_number":850,"context_line":"   the new RBAC. This is enabled by default in the 2024.2 release (and also in"}],"source_content_type":"text/x-rst","patch_set":3,"id":"73e84957_c010225d","line":847,"updated":"2024-04-30 18:06:43.000000000","message":"This implies that projects that aren\u0027t scope-compatible will be unable to be used at this point, yeah?","commit_id":"91bb622fed1da11b3a430370119b6c1963037a76"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"c593fcdbfeafdcd70d4b6441d8df4ac802cc7c0b","unresolved":true,"context_lines":[{"line_number":844,"context_line":"2025.2-Release Timeline"},{"line_number":845,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":846,"context_line":""},{"line_number":847,"context_line":"#. Remove the oslo.policy ``enforce_scope`` config flag"},{"line_number":848,"context_line":""},{"line_number":849,"context_line":"   The config option ``enforce_scope``  was added temporarily to migrate to"},{"line_number":850,"context_line":"   the new RBAC. This is enabled by default in the 2024.2 release (and also in"}],"source_content_type":"text/x-rst","patch_set":3,"id":"8c13dba8_85ebf4c9","line":847,"in_reply_to":"73e84957_c010225d","updated":"2024-04-30 20:08:23.000000000","message":"yes, the whole idea is to have scope enforcement enabled always and not configurable.","commit_id":"91bb622fed1da11b3a430370119b6c1963037a76"},{"author":{"_account_id":10342,"name":"Jay Faulkner","display_name":"JayF","email":"jay@jvf.cc","username":"JayF","status":"youtube.com/@oss-gr / podcast.gr-oss.io"},"change_message_id":"97f382262d8d7c7e07b34f9477885d6a7e7aa1f9","unresolved":true,"context_lines":[{"line_number":844,"context_line":"2025.2-Release Timeline"},{"line_number":845,"context_line":"^^^^^^^^^^^^^^^^^^^^^^^"},{"line_number":846,"context_line":""},{"line_number":847,"context_line":"#. Remove the oslo.policy ``enforce_scope`` config flag"},{"line_number":848,"context_line":""},{"line_number":849,"context_line":"   The config option ``enforce_scope``  was added temporarily to migrate to"},{"line_number":850,"context_line":"   the new RBAC. This is enabled by default in the 2024.2 release (and also in"}],"source_content_type":"text/x-rst","patch_set":3,"id":"3ae190ed_6173332d","line":847,"in_reply_to":"8c13dba8_85ebf4c9","updated":"2024-04-30 20:09:15.000000000","message":"I agree, just making sure I have full understanding.","commit_id":"91bb622fed1da11b3a430370119b6c1963037a76"}]}