)]}'
{"specs/kilo/trusted-attributes-policy.rst":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":3,"context_line":" License.\r"},{"line_number":4,"context_line":"\r"},{"line_number":5,"context_line":" http://creativecommons.org/licenses/by/3.0/legalcode\r"},{"line_number":6,"context_line":"\r"},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":8,"context_line":"Trusted Attributes Issuing Policy\r"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_d990dd97","line":6,"updated":"2014-12-09 19:18:21.000000000","message":"Have some interesting formatting going on here.","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":3,"context_line":" License.\r"},{"line_number":4,"context_line":"\r"},{"line_number":5,"context_line":" http://creativecommons.org/licenses/by/3.0/legalcode\r"},{"line_number":6,"context_line":"\r"},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":8,"context_line":"Trusted Attributes Issuing Policy\r"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_99992a22","line":6,"in_reply_to":"3a961159_d990dd97","updated":"2014-12-16 12:16:36.000000000","message":"stupid DOS format. Has now been removed","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":6,"context_line":"\r"},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":8,"context_line":"Trusted Attributes Issuing Policy\r"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":10,"context_line":"\r"},{"line_number":11,"context_line":"`bp trusted-attributes-issuing-policy \u003chttps://blueprints.launchpad.net/keystone/+spec/trusted-attribute-issuing-policy\u003e`_\r"},{"line_number":12,"context_line":"\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_19ea650f","line":9,"updated":"2014-12-09 19:18:21.000000000","message":"Suggest making the header lines the same length as the title:","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":6,"context_line":"\r"},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":8,"context_line":"Trusted Attributes Issuing Policy\r"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":10,"context_line":"\r"},{"line_number":11,"context_line":"`bp trusted-attributes-issuing-policy \u003chttps://blueprints.launchpad.net/keystone/+spec/trusted-attribute-issuing-policy\u003e`_\r"},{"line_number":12,"context_line":"\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_99cbea1d","line":9,"in_reply_to":"3a961159_19ea650f","updated":"2014-12-16 12:16:36.000000000","message":"Done","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":25,"context_line":"individual Identity Provider. This means that a great deal of repetition may be\r"},{"line_number":26,"context_line":"required to set up rules for attribute mapping.\r"},{"line_number":27,"context_line":"\r"},{"line_number":28,"context_line":"For example, given \r"},{"line_number":29,"context_line":"three Identity Providers: IDPA, IDPB and IDPC,\r"},{"line_number":30,"context_line":"and three attributes: X, Y and Z\r"},{"line_number":31,"context_line":"which map into different groups: group1, group2 and group3 respectively, \r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_59cb0da5","line":28,"updated":"2014-12-09 19:18:21.000000000","message":"Remove whitespace. Applies to other occurrences in this file.","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":25,"context_line":"individual Identity Provider. This means that a great deal of repetition may be\r"},{"line_number":26,"context_line":"required to set up rules for attribute mapping.\r"},{"line_number":27,"context_line":"\r"},{"line_number":28,"context_line":"For example, given \r"},{"line_number":29,"context_line":"three Identity Providers: IDPA, IDPB and IDPC,\r"},{"line_number":30,"context_line":"and three attributes: X, Y and Z\r"},{"line_number":31,"context_line":"which map into different groups: group1, group2 and group3 respectively, \r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_594a62ad","line":28,"in_reply_to":"3a961159_59cb0da5","updated":"2014-12-16 12:16:36.000000000","message":"Done","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":29,"context_line":"three Identity Providers: IDPA, IDPB and IDPC,\r"},{"line_number":30,"context_line":"and three attributes: X, Y and Z\r"},{"line_number":31,"context_line":"which map into different groups: group1, group2 and group3 respectively, \r"},{"line_number":32,"context_line":"and say that IDPA issues X and Y, IDPB issues X and Z and IDPC issues Y and Z,\r"},{"line_number":33,"context_line":"then we would currently have the following mapping rules:\r"},{"line_number":34,"context_line":"\r"},{"line_number":35,"context_line":"For IDPA, X maps to group1 and Y maps to group2\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_d96c5d9f","line":32,"updated":"2014-12-09 19:18:21.000000000","message":"What are X, Y, and Z? Attributes?","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":29,"context_line":"three Identity Providers: IDPA, IDPB and IDPC,\r"},{"line_number":30,"context_line":"and three attributes: X, Y and Z\r"},{"line_number":31,"context_line":"which map into different groups: group1, group2 and group3 respectively, \r"},{"line_number":32,"context_line":"and say that IDPA issues X and Y, IDPB issues X and Z and IDPC issues Y and Z,\r"},{"line_number":33,"context_line":"then we would currently have the following mapping rules:\r"},{"line_number":34,"context_line":"\r"},{"line_number":35,"context_line":"For IDPA, X maps to group1 and Y maps to group2\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_99c04ae2","line":32,"in_reply_to":"3a961159_d96c5d9f","updated":"2014-12-16 12:16:36.000000000","message":"yes, it says this on the previous line","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":43,"context_line":"matching, then there is no guarantee that only the attribute(s) that the\r"},{"line_number":44,"context_line":"administrator wanted to match, will be matched. Several others may match as\r"},{"line_number":45,"context_line":"well. This is because the regular expression is matching on a potentially\r"},{"line_number":46,"context_line":"infinite set of attributes that an IdP can send. By having a trusted attributes\r"},{"line_number":47,"context_line":"policy, we limit the set of attributes that can be matched to only the trusted\r"},{"line_number":48,"context_line":"attributes as the untrusted ones will have been discarded before the mapping\r"},{"line_number":49,"context_line":"rules are evaluated.\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_b9f4f1cf","line":46,"updated":"2014-12-09 19:18:21.000000000","message":"By having a trusted attribute policy*","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":43,"context_line":"matching, then there is no guarantee that only the attribute(s) that the\r"},{"line_number":44,"context_line":"administrator wanted to match, will be matched. Several others may match as\r"},{"line_number":45,"context_line":"well. This is because the regular expression is matching on a potentially\r"},{"line_number":46,"context_line":"infinite set of attributes that an IdP can send. By having a trusted attributes\r"},{"line_number":47,"context_line":"policy, we limit the set of attributes that can be matched to only the trusted\r"},{"line_number":48,"context_line":"attributes as the untrusted ones will have been discarded before the mapping\r"},{"line_number":49,"context_line":"rules are evaluated.\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_f9230ebc","line":46,"in_reply_to":"3a961159_b9f4f1cf","updated":"2014-12-16 12:16:36.000000000","message":"trusted attributes issuing policy","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------\r"},{"line_number":283,"context_line":"\r"},{"line_number":284,"context_line":"Primary assignee:\r"},{"line_number":285,"context_line":"  Kristy Siu Launchpad ID: 5956\r"},{"line_number":286,"context_line":"\r"},{"line_number":287,"context_line":"Other contributors:\r"},{"line_number":288,"context_line":"  David Chadwick Launchpad ID: [?]\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_9faf15e3","line":285,"updated":"2014-12-09 19:18:21.000000000","message":"Suggest replacing these with IRC nicknames instead of the Launchpad ID","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":282,"context_line":"-----------\r"},{"line_number":283,"context_line":"\r"},{"line_number":284,"context_line":"Primary assignee:\r"},{"line_number":285,"context_line":"  Kristy Siu Launchpad ID: 5956\r"},{"line_number":286,"context_line":"\r"},{"line_number":287,"context_line":"Other contributors:\r"},{"line_number":288,"context_line":"  David Chadwick Launchpad ID: [?]\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_5902620c","line":285,"in_reply_to":"3a961159_9faf15e3","updated":"2014-12-16 12:16:36.000000000","message":"Done","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":285,"context_line":"  Kristy Siu Launchpad ID: 5956\r"},{"line_number":286,"context_line":"\r"},{"line_number":287,"context_line":"Other contributors:\r"},{"line_number":288,"context_line":"  David Chadwick Launchpad ID: [?]\r"},{"line_number":289,"context_line":"\r"},{"line_number":290,"context_line":"Work Items\r"},{"line_number":291,"context_line":"----------\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_bfaa11d0","line":288,"updated":"2014-12-09 19:18:21.000000000","message":"Same comment here.","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":285,"context_line":"  Kristy Siu Launchpad ID: 5956\r"},{"line_number":286,"context_line":"\r"},{"line_number":287,"context_line":"Other contributors:\r"},{"line_number":288,"context_line":"  David Chadwick Launchpad ID: [?]\r"},{"line_number":289,"context_line":"\r"},{"line_number":290,"context_line":"Work Items\r"},{"line_number":291,"context_line":"----------\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_9403af0c","line":288,"in_reply_to":"3a961159_bfaa11d0","updated":"2014-12-16 12:16:36.000000000","message":"Done","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"e3cc25d48eb18bb0f5731f00d8793472ab806599","unresolved":false,"context_lines":[{"line_number":316,"context_line":"\r"},{"line_number":317,"context_line":"References\r"},{"line_number":318,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":319,"context_line":"\r"},{"line_number":320,"context_line":"Slideshow describing Trusted Attributes and Simplified Mapping\r"},{"line_number":321,"context_line":"\u003chttp://www.slideshare.net/davidwchadwick/scalable-and-usable-attribute-mappings-in-keystone-openstack#\u003e\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_ff8bb965","line":319,"updated":"2014-12-09 19:18:21.000000000","message":"Change this to be an .rst formatted link: \n\n    `Trusted Attribute Slideshow \u003chttp://www.slideshare.net/davidwchadwick/scalable-and-usable-attribute-mappings-in-keystone-opensta\nck#\u003e`_","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"},{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"4b21c9cc1ab213d3b8622fdaf1d70d7d149e8c47","unresolved":false,"context_lines":[{"line_number":316,"context_line":"\r"},{"line_number":317,"context_line":"References\r"},{"line_number":318,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\r"},{"line_number":319,"context_line":"\r"},{"line_number":320,"context_line":"Slideshow describing Trusted Attributes and Simplified Mapping\r"},{"line_number":321,"context_line":"\u003chttp://www.slideshare.net/davidwchadwick/scalable-and-usable-attribute-mappings-in-keystone-openstack#\u003e\r"}],"source_content_type":"text/x-rst","patch_set":1,"id":"3a961159_f466b3ed","line":319,"in_reply_to":"3a961159_ff8bb965","updated":"2014-12-16 12:16:36.000000000","message":"Done","commit_id":"f98e8e529a997e1c32a9729e40e672fc2ec849f3"}]}