)]}'
{"doc/source/index.rst":[{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"7ef9e4bbb557d6ffe62e5455807d5c9dbc99e973","unresolved":false,"context_lines":[{"line_number":14,"context_line":"keystone"},{"line_number":15,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Pike approved specs:"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":".. toctree::"},{"line_number":20,"context_line":"   :glob:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_7ae0a929","line":17,"updated":"2017-02-08 22:37:51.000000000","message":"shouldn\u0027t all the changes in this file be made under a separate patch? They don\u0027t appear to be related to this one.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"ba6f7ac3c9683697d27d088f6f65b730c44a2c93","unresolved":false,"context_lines":[{"line_number":14,"context_line":"keystone"},{"line_number":15,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":16,"context_line":""},{"line_number":17,"context_line":"Pike approved specs:"},{"line_number":18,"context_line":""},{"line_number":19,"context_line":".. toctree::"},{"line_number":20,"context_line":"   :glob:"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_797a6e25","line":17,"in_reply_to":"1a430d35_7ae0a929","updated":"2017-02-09 04:32:07.000000000","message":"Yeah - there weren\u0027t any other specs created yet, but I didn\u0027t pull this into a separate patch yet because I didn\u0027t have any files to commit to the empty directory. I\u0027m sure this is what\u0027s caused the merge conflict, which I\u0027ll address when I rebase.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"}],"specs/keystone/pike/policy-in-code.rst":[{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"7ef9e4bbb557d6ffe62e5455807d5c9dbc99e973","unresolved":false,"context_lines":[{"line_number":53,"context_line":"* There is no longer a need to maintain a policy file in tree."},{"line_number":54,"context_line":"* We can build tooling that notifies operators when policy changes or new"},{"line_number":55,"context_line":"  policies are added for new operations."},{"line_number":56,"context_line":"* Unit testing will be able to modify policy without having to override a"},{"line_number":57,"context_line":"  policy file."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Alternatives"},{"line_number":60,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_9a5c754c","line":57,"range":{"start_line":56,"start_character":2,"end_line":57,"end_character":13},"updated":"2017-02-08 22:37:51.000000000","message":"no, I think you\u0027d want unit tests to work like a user would, and a user has to edit the policy file to override something. I\u0027m making that case with nova in https://review.openstack.org/#/c/398610","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"fe4648cca2a9085ed79c051d8ae9659ebc6b3794","unresolved":false,"context_lines":[{"line_number":54,"context_line":"* We can build tooling that notifies operators when policy changes or new"},{"line_number":55,"context_line":"  policies are added for new operations."},{"line_number":56,"context_line":"* Unit testing will be able to modify policy without having to override a"},{"line_number":57,"context_line":"  policy file."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Alternatives"},{"line_number":60,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_59d4d2ea","line":57,"in_reply_to":"1a430d35_9a5c754c","updated":"2017-02-09 05:16:00.000000000","message":"That makes sense - I can remove this.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"7ef9e4bbb557d6ffe62e5455807d5c9dbc99e973","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Performance Impact"},{"line_number":83,"context_line":"------------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"The expense of this will come at registering the policy at service start up."},{"line_number":86,"context_line":"From a performance perspetive, this would be very similar to how configuration"},{"line_number":87,"context_line":"is registered when the service is started."},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_3d1ffb5b","line":85,"range":{"start_line":85,"start_character":0,"end_line":85,"end_character":11},"updated":"2017-02-08 22:37:51.000000000","message":"This should actually be faster than reading a parsing a policy file if the user isn\u0027t overriding things. If they are overriding policy, so you\u0027re doing both, then maybe there\u0027s a \nsmall performance impact.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"fe4648cca2a9085ed79c051d8ae9659ebc6b3794","unresolved":false,"context_lines":[{"line_number":82,"context_line":"Performance Impact"},{"line_number":83,"context_line":"------------------"},{"line_number":84,"context_line":""},{"line_number":85,"context_line":"The expense of this will come at registering the policy at service start up."},{"line_number":86,"context_line":"From a performance perspetive, this would be very similar to how configuration"},{"line_number":87,"context_line":"is registered when the service is started."},{"line_number":88,"context_line":""}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_99daba15","line":85,"in_reply_to":"1a430d35_3d1ffb5b","updated":"2017-02-09 05:16:00.000000000","message":"Regardless, the performance impact should be minimal. I\u0027ll update.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"7ef9e4bbb557d6ffe62e5455807d5c9dbc99e973","unresolved":false,"context_lines":[{"line_number":86,"context_line":"From a performance perspetive, this would be very similar to how configuration"},{"line_number":87,"context_line":"is registered when the service is started."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Other Deployer Impact"},{"line_number":90,"context_line":"---------------------"},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"If a deployer already makes modifications to the default policy file, they"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_9dad4feb","line":89,"range":{"start_line":89,"start_character":1,"end_line":89,"end_character":21},"updated":"2017-02-08 22:37:51.000000000","message":"it\u0027s probably worth noting here that the \"default\" rule that oslo.policy will use if code attempts to check something and doesn\u0027t find it defined will no longer be relevant. That was possible when definitions were only in policy files (the file could have removed that line) but is not possible when all there is always a definition for everything because they are defined in code.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"fe4648cca2a9085ed79c051d8ae9659ebc6b3794","unresolved":false,"context_lines":[{"line_number":86,"context_line":"From a performance perspetive, this would be very similar to how configuration"},{"line_number":87,"context_line":"is registered when the service is started."},{"line_number":88,"context_line":""},{"line_number":89,"context_line":"Other Deployer Impact"},{"line_number":90,"context_line":"---------------------"},{"line_number":91,"context_line":""},{"line_number":92,"context_line":"If a deployer already makes modifications to the default policy file, they"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1a430d35_f97e5ee2","line":89,"in_reply_to":"1a430d35_9dad4feb","updated":"2017-02-09 05:16:00.000000000","message":"Oh - so you\u0027re saying we no longer have the usability concern of a deployer removing a policy that is needed by an API, and this is because we will *always* have at least a default defined in code. Good point, I\u0027ll add that in.","commit_id":"4bcc666da5f4f638cea3e310664442ba7aa7450c"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"4805e143cf5c65e72e36a697b52798e0c0b7ee9a","unresolved":false,"context_lines":[{"line_number":96,"context_line":"will have to continue maintaining those changes. For deployers who modify a"},{"line_number":97,"context_line":"subset or none of the policy entries, they can essentially remove their policy"},{"line_number":98,"context_line":"file, or the policies that are the default. The end result should be a policy"},{"line_number":99,"context_line":"file the purely consists of overrides the deployer wishes to enforce."},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Another deployer impact would be the usability concern of having to rely on a"},{"line_number":102,"context_line":"blanket default policy value. Since the previous policy implementation required"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a430d35_e3b92dcd","line":99,"range":{"start_line":99,"start_character":5,"end_line":99,"end_character":8},"updated":"2017-02-09 18:52:44.000000000","message":"that*","commit_id":"d4c8bd6f9b27856fb84e33c6cd1c70e6df5f2ffe"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"59906e4d68023be461f1451b6795d61ed6d56efb","unresolved":false,"context_lines":[{"line_number":96,"context_line":"will have to continue maintaining those changes. For deployers who modify a"},{"line_number":97,"context_line":"subset or none of the policy entries, they can essentially remove their policy"},{"line_number":98,"context_line":"file, or the policies that are the default. The end result should be a policy"},{"line_number":99,"context_line":"file the purely consists of overrides the deployer wishes to enforce."},{"line_number":100,"context_line":""},{"line_number":101,"context_line":"Another deployer impact would be the usability concern of having to rely on a"},{"line_number":102,"context_line":"blanket default policy value. Since the previous policy implementation required"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa31d9ce_ca59a390","line":99,"in_reply_to":"1a430d35_e3b92dcd","updated":"2017-02-09 20:48:30.000000000","message":"Done","commit_id":"d4c8bd6f9b27856fb84e33c6cd1c70e6df5f2ffe"},{"author":{"_account_id":10608,"name":"Matthew Edmonds","email":"edmondsw@us.ibm.com","username":"edmondsw"},"change_message_id":"4805e143cf5c65e72e36a697b52798e0c0b7ee9a","unresolved":false,"context_lines":[{"line_number":103,"context_line":"the deployer to define all policies in a file and maintain them across"},{"line_number":104,"context_line":"releases, a safe guard was to implement a default policy (i.e. like deny all)."},{"line_number":105,"context_line":"This behavior should no longer be relevant since every policy should have a"},{"line_number":106,"context_line":"specific default value. This makes deploying and upgrading the service easier"},{"line_number":107,"context_line":"for deployers because they can safely assume a default tailored to the"},{"line_number":108,"context_line":"operation."},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Developer Impact"},{"line_number":111,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1a430d35_c35ef178","line":108,"range":{"start_line":106,"start_character":24,"end_line":108,"end_character":10},"updated":"2017-02-09 18:52:44.000000000","message":"I wouldn\u0027t go that far. I actually mourned the loss of a default rule when nova did this, because as someone that customizes policy I can no longer rely on a default \"don\u0027t allow\" rule to block things that may have been added but that I haven\u0027t tested and customized with my roles yet. I have to identify what nova has added and specifically not allow it if I don\u0027t want to support it, else the default (which won\u0027t work for me) would take effect. So I think this is a significant negative impact. But, overall, I think that\u0027s offset by some of the advantages of having policy in code, so I\u0027m willing to live with it.","commit_id":"d4c8bd6f9b27856fb84e33c6cd1c70e6df5f2ffe"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"59906e4d68023be461f1451b6795d61ed6d56efb","unresolved":false,"context_lines":[{"line_number":105,"context_line":"This behavior should no longer be relevant since every policy should have a"},{"line_number":106,"context_line":"specific default value. This makes deploying and upgrading the service easier"},{"line_number":107,"context_line":"for deployers because they can safely assume a default tailored to the"},{"line_number":108,"context_line":"operation."},{"line_number":109,"context_line":""},{"line_number":110,"context_line":"Developer Impact"},{"line_number":111,"context_line":"----------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"fa31d9ce_ca6c430b","line":108,"in_reply_to":"1a430d35_c35ef178","updated":"2017-02-09 20:48:30.000000000","message":"Done","commit_id":"d4c8bd6f9b27856fb84e33c6cd1c70e6df5f2ffe"},{"author":{"_account_id":18464,"name":"Richard Avelar","email":"csravelar@gmail.com","username":"razone"},"change_message_id":"1cf9010f48ae09c3b344d8c376cb86280987735d","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Today policy exists in a file that deployers are expected to maintain in their"},{"line_number":24,"context_line":"deployment. If a deployer need to change the default policy rules for an"},{"line_number":25,"context_line":"operation, they have to make those changes and continuously check to make sure"},{"line_number":26,"context_line":"conflicts are resolved with each new release of the policy file. This is"},{"line_number":27,"context_line":"cumbersome to maintain, even if a deployment is only using the default policy."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa31d9ce_23910848","line":24,"range":{"start_line":24,"start_character":26,"end_line":24,"end_character":30},"updated":"2017-02-13 21:09:02.000000000","message":"s/need/needs ?","commit_id":"c7467284bf1654c80ddf1e723c12b546540ff858"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5d57b0df4e7518c06dad4840c1cdffccb39025c3","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Today policy exists in a file that deployers are expected to maintain in their"},{"line_number":24,"context_line":"deployment. If a deployer need to change the default policy rules for an"},{"line_number":25,"context_line":"operation, they have to make those changes and continuously check to make sure"},{"line_number":26,"context_line":"conflicts are resolved with each new release of the policy file. This is"},{"line_number":27,"context_line":"cumbersome to maintain, even if a deployment is only using the default policy."}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa31d9ce_3693c8fb","line":24,"in_reply_to":"fa31d9ce_23910848","updated":"2017-02-15 04:21:01.000000000","message":"Done","commit_id":"c7467284bf1654c80ddf1e723c12b546540ff858"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"19593315a2a6c7af781caf75bb4df025d8c84f89","unresolved":false,"context_lines":[{"line_number":85,"context_line":"The performance impact of moving policy in code should be minimal. If the"},{"line_number":86,"context_line":"deployment doesn\u0027t have a policy file on disk, the service will not have to"},{"line_number":87,"context_line":"fetch it. Instead the default will be registered and used from within code. In"},{"line_number":88,"context_line":"the event the deployment is using both defaults in code and policy overrides,"},{"line_number":89,"context_line":"the combination of the two approaches might cause some performance impact"},{"line_number":90,"context_line":"compared to defaults in code, but the overall impact should be negligible."},{"line_number":91,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa31d9ce_00e15a9a","line":88,"updated":"2017-02-13 20:55:21.000000000","message":"So deployers can override the policies in code? Otherwise, I\u0027m not following this. The defaults would be in code and only overrides would be in the json file.","commit_id":"c7467284bf1654c80ddf1e723c12b546540ff858"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"5d57b0df4e7518c06dad4840c1cdffccb39025c3","unresolved":false,"context_lines":[{"line_number":85,"context_line":"The performance impact of moving policy in code should be minimal. If the"},{"line_number":86,"context_line":"deployment doesn\u0027t have a policy file on disk, the service will not have to"},{"line_number":87,"context_line":"fetch it. Instead the default will be registered and used from within code. In"},{"line_number":88,"context_line":"the event the deployment is using both defaults in code and policy overrides,"},{"line_number":89,"context_line":"the combination of the two approaches might cause some performance impact"},{"line_number":90,"context_line":"compared to defaults in code, but the overall impact should be negligible."},{"line_number":91,"context_line":""}],"source_content_type":"text/x-rst","patch_set":4,"id":"fa31d9ce_36aae819","line":88,"in_reply_to":"fa31d9ce_00e15a9a","updated":"2017-02-15 04:21:01.000000000","message":"Done, I attempted to remove the \"in-code\" part since it would be implied in this sense.","commit_id":"c7467284bf1654c80ddf1e723c12b546540ff858"},{"author":{"_account_id":18464,"name":"Richard Avelar","email":"csravelar@gmail.com","username":"razone"},"change_message_id":"eb0a0e1b76f68c5f1177d6fc5055986e81a6818a","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Today policy exists in a file that deployers are expected to maintain in their"},{"line_number":24,"context_line":"deployment. If a deployer needsto change the default policy rules for an"},{"line_number":25,"context_line":"operation, they have to make those changes and continuously check to make sure"},{"line_number":26,"context_line":"conflicts are resolved with each new release of the policy file. This is"},{"line_number":27,"context_line":"cumbersome to maintain, even if a deployment is only using the default policy."}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa31d9ce_b108a229","line":24,"range":{"start_line":24,"start_character":26,"end_line":24,"end_character":33},"updated":"2017-02-15 04:26:44.000000000","message":"s/needsto/needs to","commit_id":"4db74f8e21bd53912d8cc996e5d7797b90a5b713"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"8ac3ca0a59e00914bc2384ea8eadbf1d04c8a818","unresolved":false,"context_lines":[{"line_number":21,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":22,"context_line":""},{"line_number":23,"context_line":"Today policy exists in a file that deployers are expected to maintain in their"},{"line_number":24,"context_line":"deployment. If a deployer needsto change the default policy rules for an"},{"line_number":25,"context_line":"operation, they have to make those changes and continuously check to make sure"},{"line_number":26,"context_line":"conflicts are resolved with each new release of the policy file. This is"},{"line_number":27,"context_line":"cumbersome to maintain, even if a deployment is only using the default policy."}],"source_content_type":"text/x-rst","patch_set":5,"id":"fa31d9ce_3162f2d8","line":24,"in_reply_to":"fa31d9ce_b108a229","updated":"2017-02-15 04:31:58.000000000","message":"Ah! Thanks, done.","commit_id":"4db74f8e21bd53912d8cc996e5d7797b90a5b713"},{"author":{"_account_id":13478,"name":"Boris Bobrov","email":"b.bobrov@sap.com","username":"bbobrov"},"change_message_id":"476fd6dc49c65c154c21e0a1669f059409fcbb78","unresolved":false,"context_lines":[{"line_number":122,"context_line":"-----------"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Primary assignee:"},{"line_number":125,"context_line":"  None"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Other contributors:"},{"line_number":128,"context_line":"  None"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa31d9ce_96ad469d","line":125,"range":{"start_line":125,"start_character":2,"end_line":125,"end_character":6},"updated":"2017-02-15 10:59:22.000000000","message":"if we don\u0027t have the primary assignee, we should not target it to Pike. it should go to backlog.","commit_id":"612014614659bd88896bcca9f14cc97fdcf0d71e"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"310a677ef9f09692f56f3a363d2058e228c9b7a5","unresolved":false,"context_lines":[{"line_number":122,"context_line":"-----------"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Primary assignee:"},{"line_number":125,"context_line":"  None"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Other contributors:"},{"line_number":128,"context_line":"  None"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa31d9ce_1eefa11e","line":125,"in_reply_to":"fa31d9ce_1cb96c15","updated":"2017-02-15 15:50:35.000000000","message":"Thanks Anthony! Done.","commit_id":"612014614659bd88896bcca9f14cc97fdcf0d71e"},{"author":{"_account_id":22219,"name":"Anthony Washington","email":"anthony.washington@intel.com","username":"antwash"},"change_message_id":"800f335b35736e4c0cfc3853ab5afaeccc89cfe1","unresolved":false,"context_lines":[{"line_number":122,"context_line":"-----------"},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"Primary assignee:"},{"line_number":125,"context_line":"  None"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"Other contributors:"},{"line_number":128,"context_line":"  None"}],"source_content_type":"text/x-rst","patch_set":6,"id":"fa31d9ce_1cb96c15","line":125,"range":{"start_line":125,"start_character":2,"end_line":125,"end_character":6},"in_reply_to":"fa31d9ce_96ad469d","updated":"2017-02-15 15:32:28.000000000","message":"Hey, Boris -- Myself and Richard Avelar will take the initiative as primary assignees to implement this for Pike release.","commit_id":"612014614659bd88896bcca9f14cc97fdcf0d71e"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"02859b62a6220443c9e0fe8d16eecc2bba8d6d96","unresolved":false,"context_lines":[{"line_number":30,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":31,"context_line":""},{"line_number":32,"context_line":"The proposed solution is to check policy into the code base and register it"},{"line_number":33,"context_line":"using the oslo.policy library. This is very similar to how projects register"},{"line_number":34,"context_line":"and use configuration options using oslo.config."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"The registration will need two pieces of data:"},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"da36d5c6_1aa584b4","line":34,"range":{"start_line":33,"start_character":68,"end_line":34,"end_character":47},"updated":"2017-02-21 12:45:04.000000000","message":"with oslo.config, a file where I change the settings is provided. This doesn\u0027t seem to be the case here, right?","commit_id":"27fac0d9d60fd6cc6b838ceb86a6e1740dccee4f"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"234cdaba11399b652c994194d221c01c6174ab1a","unresolved":false,"context_lines":[{"line_number":31,"context_line":""},{"line_number":32,"context_line":"The proposed solution is to check policy into the code base and register it"},{"line_number":33,"context_line":"using the oslo.policy library. This is very similar to how projects register"},{"line_number":34,"context_line":"and use configuration options using oslo.config."},{"line_number":35,"context_line":""},{"line_number":36,"context_line":"The registration will need two pieces of data:"},{"line_number":37,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"da36d5c6_59f2269b","line":34,"in_reply_to":"da36d5c6_1aa584b4","updated":"2017-02-24 15:50:54.000000000","message":"I clarified this a bit, should be in the next patch set.","commit_id":"27fac0d9d60fd6cc6b838ceb86a6e1740dccee4f"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"02859b62a6220443c9e0fe8d16eecc2bba8d6d96","unresolved":false,"context_lines":[{"line_number":55,"context_line":"* We can provide a tool to help reduce redundancy in policy files."},{"line_number":56,"context_line":"* It will be easier to provide a description of each policy much like we do"},{"line_number":57,"context_line":"  configuartion options."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Alternatives"},{"line_number":60,"context_line":"------------"},{"line_number":61,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"da36d5c6_9a917455","line":58,"updated":"2017-02-21 12:45:04.000000000","message":"what will be the process for the operator to update the policy rules?","commit_id":"27fac0d9d60fd6cc6b838ceb86a6e1740dccee4f"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"234cdaba11399b652c994194d221c01c6174ab1a","unresolved":false,"context_lines":[{"line_number":55,"context_line":"* We can provide a tool to help reduce redundancy in policy files."},{"line_number":56,"context_line":"* It will be easier to provide a description of each policy much like we do"},{"line_number":57,"context_line":"  configuartion options."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Alternatives"},{"line_number":60,"context_line":"------------"},{"line_number":61,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"da36d5c6_d959b68f","line":58,"in_reply_to":"da36d5c6_89784cc6","updated":"2017-02-24 15:50:54.000000000","message":"Once we have everything in-code, we are start using the same tooling nova uses to let operators which policies they have that are duplicates of the defaults. Essentially, which policies are redundant and can be removed. This should help operators get to a policy file that consists of only the overrides they care about, which will be easier to maintain moving forward.","commit_id":"27fac0d9d60fd6cc6b838ceb86a6e1740dccee4f"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"a7f07c91dbd189042bac798791bd466018d2fdce","unresolved":false,"context_lines":[{"line_number":55,"context_line":"* We can provide a tool to help reduce redundancy in policy files."},{"line_number":56,"context_line":"* It will be easier to provide a description of each policy much like we do"},{"line_number":57,"context_line":"  configuartion options."},{"line_number":58,"context_line":""},{"line_number":59,"context_line":"Alternatives"},{"line_number":60,"context_line":"------------"},{"line_number":61,"context_line":""}],"source_content_type":"text/x-rst","patch_set":7,"id":"da36d5c6_89784cc6","line":58,"in_reply_to":"da36d5c6_9a917455","updated":"2017-02-21 15:06:50.000000000","message":"I believe they would just update their yaml file.\n\nHere is a sample file from nova:\nhttps://docs.openstack.org/developer/nova/sample_policy.html","commit_id":"27fac0d9d60fd6cc6b838ceb86a6e1740dccee4f"}]}