)]}'
{"/PATCHSET_LEVEL":[{"author":{"_account_id":8648,"name":"Radomir Dopieralski","email":"openstack@dopieralski.pl","username":"thesheep"},"change_message_id":"d454ee244f5b83adb558c0bc34c5520dc9889ca1","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":10,"id":"4394fd01_9d1e07c6","updated":"2026-07-20 11:04:32.000000000","message":"Let\u0027s merge this to fix the gate, and we will add any further fixes and improvements in the follow-up patches.","commit_id":"ed72573c2a3125f611acc30cf29e71c2a7555cff"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"ac98e3d45c5cdbb3a9ff4c69fe01baa62159be0e","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":10,"id":"ba1a2449_00e12b0c","updated":"2026-07-24 16:52:28.000000000","message":"cool, this is correct way. thanks","commit_id":"ed72573c2a3125f611acc30cf29e71c2a7555cff"}],"openstack_auth/policy.py":[{"author":{"_account_id":9816,"name":"Takashi Kajinami","email":"kajinamit@oss.nttdata.com","username":"kajinamit"},"change_message_id":"e273ad8d8eeb172487eb401100e9f01a459f30f7","unresolved":true,"context_lines":[{"line_number":272,"context_line":"            credentials,"},{"line_number":273,"context_line":"            do_raise\u003dTrue,"},{"line_number":274,"context_line":"        )"},{"line_number":275,"context_line":"    except policy.InvalidScope:"},{"line_number":276,"context_line":"        # Ignore oslo.policy token scope checks."},{"line_number":277,"context_line":"        allowed \u003d True"},{"line_number":278,"context_line":"    except policy.PolicyNotAuthorized:"}],"source_content_type":"text/x-python","patch_set":10,"id":"bc38bc3e_9f858dae","line":275,"range":{"start_line":275,"start_character":11,"end_line":275,"end_character":31},"updated":"2026-07-20 13:45:54.000000000","message":"I understand this is for short-term unblocking but this should be fixed before release, because scope enforcement is evaluated BEFORE policy rule is evaluated, and this expect catch voids policy check effectively.","commit_id":"ed72573c2a3125f611acc30cf29e71c2a7555cff"},{"author":{"_account_id":8648,"name":"Radomir Dopieralski","email":"openstack@dopieralski.pl","username":"thesheep"},"change_message_id":"1a61ad699de379f529f3d75083c99f3331257724","unresolved":true,"context_lines":[{"line_number":272,"context_line":"            credentials,"},{"line_number":273,"context_line":"            do_raise\u003dTrue,"},{"line_number":274,"context_line":"        )"},{"line_number":275,"context_line":"    except policy.InvalidScope:"},{"line_number":276,"context_line":"        # Ignore oslo.policy token scope checks."},{"line_number":277,"context_line":"        allowed \u003d True"},{"line_number":278,"context_line":"    except policy.PolicyNotAuthorized:"}],"source_content_type":"text/x-python","patch_set":10,"id":"c65090c4_539b55bd","line":275,"range":{"start_line":275,"start_character":11,"end_line":275,"end_character":31},"in_reply_to":"bc38bc3e_9f858dae","updated":"2026-07-21 07:00:48.000000000","message":"Yeah, ideally we would add a parameter to the oslo.policy enforce method to skip that check. It makes no sense in Horizon context to have it.","commit_id":"ed72573c2a3125f611acc30cf29e71c2a7555cff"},{"author":{"_account_id":8556,"name":"Ghanshyam Maan","display_name":"Ghanshyam Maan","email":"gmaan.os14@gmail.com","username":"ghanshyam"},"change_message_id":"af64645352f292533abb0c4c8d7e1274f269c91c","unresolved":true,"context_lines":[{"line_number":272,"context_line":"            credentials,"},{"line_number":273,"context_line":"            do_raise\u003dTrue,"},{"line_number":274,"context_line":"        )"},{"line_number":275,"context_line":"    except policy.InvalidScope:"},{"line_number":276,"context_line":"        # Ignore oslo.policy token scope checks."},{"line_number":277,"context_line":"        allowed \u003d True"},{"line_number":278,"context_line":"    except policy.PolicyNotAuthorized:"}],"source_content_type":"text/x-python","patch_set":10,"id":"9ed68216_75984f42","line":275,"range":{"start_line":275,"start_character":11,"end_line":275,"end_character":31},"in_reply_to":"c65090c4_539b55bd","updated":"2026-07-24 16:54:43.000000000","message":"instead of adding a way to not perform the enforce_scope, I will say let\u0027s move the enforce_scope checks after the policy rules checks because scope is going to be the correct in 99.9% cases. We should not have any way for users or services to didable the scope chekcs","commit_id":"ed72573c2a3125f611acc30cf29e71c2a7555cff"}],"openstack_auth/tests/unit/test_policy.py":[{"author":{"_account_id":22348,"name":"Zuul","username":"zuul","tags":["SERVICE_USER"]},"tag":"autogenerated:zuul:check","change_message_id":"48c4cffed9091a1a1c85916edecce9fea67008af","unresolved":false,"context_lines":[{"line_number":11,"context_line":"# See the License for the specific language governing permissions and"},{"line_number":12,"context_line":"# limitations under the License."},{"line_number":13,"context_line":""},{"line_number":14,"context_line":"from unittest import mock, skip"},{"line_number":15,"context_line":""},{"line_number":16,"context_line":"from django import http"},{"line_number":17,"context_line":"from django import test"}],"source_content_type":"text/x-python","patch_set":5,"id":"efeb6475_b2c89c4f","line":14,"updated":"2026-07-17 16:32:00.000000000","message":"pep8: H301: one import per line","commit_id":"35353974889e337f3f7db6fa1b55bdb0138a6f32"}]}