)]}'
{"specs/juno/audit-support-for-federation.rst":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"5608d62b3db002f6e0ec7e315b69d76ed53ad4af","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"1ae5cdf2_59dadee8","updated":"2014-06-03 21:04:03.000000000","message":"periods missing from all the sentences!","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c0a7dbfd263562f65636c53252074704b031ca7a","unresolved":false,"context_lines":[],"source_content_type":"","patch_set":1,"id":"1ae5cdf2_34296b9b","in_reply_to":"1ae5cdf2_59dadee8","updated":"2014-06-12 16:16:25.000000000","message":"Done, and fixed all nasty white space issues","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"5608d62b3db002f6e0ec7e315b69d76ed53ad4af","unresolved":false,"context_lines":[{"line_number":23,"context_line":""},{"line_number":24,"context_line":"Problem Description"},{"line_number":25,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":26,"context_line":"For Keystone, we need to define and implement support for new CADF audit event"},{"line_number":27,"context_line":"records that capture the authentication and authorization behavior associated"},{"line_number":28,"context_line":"with the mapping of federated attributes to group-based role assignments. We"},{"line_number":29,"context_line":"also need to capture for auditing the user identity information that is derived"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_198776d8","line":26,"updated":"2014-06-03 21:04:03.000000000","message":"I think it\u0027s worth mentioning a bit of what authentication events we currently emit.\n\nSo, in Icehouse we actually have authentication events, but they are only triggered when the \"authenticate\" method of identity/core.py is hit.\n\nAnd that is only hit if the user authenticates from the \u0027password\u0027 auth plugin, and from the \u0027token\u0027 controller. (Do a search for identity_api.authenticate).\n\nSo the problem description should actually say that we don\u0027t have a mechanism to audit for when a federated user has been authenticated. Because as mentioned previously, the audit events were only triggered from identity_api, which would only store local IDs.","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"5608d62b3db002f6e0ec7e315b69d76ed53ad4af","unresolved":false,"context_lines":[{"line_number":34,"context_line":"Proposed Change"},{"line_number":35,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":36,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":37,"context_line":"operations associated with federated identity."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Alternatives"},{"line_number":40,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_3956f25c","line":37,"updated":"2014-06-03 21:04:03.000000000","message":"which operations are these?\n\nWhen they authenticate with an unscoped token?\nWhen they lookup projects/domains they can access?\nWhen they re-scope the token (this one might already be covered).\n\nIs the proposed behaviour going to be enabled by default?","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":7191,"name":"Jamie Lennox","email":"jamielennox@gmail.com","username":"jamielennox"},"change_message_id":"97130deb242673cb226d6a3662b9038bec4595ef","unresolved":false,"context_lines":[{"line_number":34,"context_line":"Proposed Change"},{"line_number":35,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":36,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":37,"context_line":"operations associated with federated identity."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Alternatives"},{"line_number":40,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_8906f71e","line":37,"in_reply_to":"1ae5cdf2_3956f25c","updated":"2014-06-10 18:48:52.000000000","message":"Is this expected to be middleware or in core?\n\nnotifications like over the message bus or you have somewhere particular in mind?","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c0a7dbfd263562f65636c53252074704b031ca7a","unresolved":false,"context_lines":[{"line_number":34,"context_line":"Proposed Change"},{"line_number":35,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":36,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":37,"context_line":"operations associated with federated identity."},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"Alternatives"},{"line_number":40,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_147e2faf","line":37,"in_reply_to":"1ae5cdf2_8906f71e","updated":"2014-06-12 16:16:25.000000000","message":"I imagine we will re-use the existing notification work we have done, which is in core.","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":8119,"name":"Eric Brown","email":"eric_wade_brown@yahoo.com","username":"ericwb"},"change_message_id":"f80a289edb996fa93d84aee2509144e534c61dc0","unresolved":false,"context_lines":[{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Notifications Impact"},{"line_number":57,"context_line":"--------------------"},{"line_number":58,"context_line":"Extra CADF ntoifications will need to be created"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"Other End User Impact"},{"line_number":61,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_08fd666e","line":58,"updated":"2014-06-03 18:19:30.000000000","message":"ntoifications -\u003e notifications","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c0a7dbfd263562f65636c53252074704b031ca7a","unresolved":false,"context_lines":[{"line_number":55,"context_line":""},{"line_number":56,"context_line":"Notifications Impact"},{"line_number":57,"context_line":"--------------------"},{"line_number":58,"context_line":"Extra CADF ntoifications will need to be created"},{"line_number":59,"context_line":""},{"line_number":60,"context_line":"Other End User Impact"},{"line_number":61,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_34524b35","line":58,"in_reply_to":"1ae5cdf2_08fd666e","updated":"2014-06-12 16:16:25.000000000","message":"Done","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"5608d62b3db002f6e0ec7e315b69d76ed53ad4af","unresolved":false,"context_lines":[{"line_number":91,"context_line":"Work Items"},{"line_number":92,"context_line":"----------"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"Define new audit event formats."},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Implement notifications for the new events."},{"line_number":97,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_f9e64aaf","line":94,"updated":"2014-06-03 21:04:03.000000000","message":"organize this into a bullet list by prefixing with *","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c0a7dbfd263562f65636c53252074704b031ca7a","unresolved":false,"context_lines":[{"line_number":91,"context_line":"Work Items"},{"line_number":92,"context_line":"----------"},{"line_number":93,"context_line":""},{"line_number":94,"context_line":"Define new audit event formats."},{"line_number":95,"context_line":""},{"line_number":96,"context_line":"Implement notifications for the new events."},{"line_number":97,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_743773ff","line":94,"in_reply_to":"1ae5cdf2_f9e64aaf","updated":"2014-06-12 16:16:25.000000000","message":"Done","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"5608d62b3db002f6e0ec7e315b69d76ed53ad4af","unresolved":false,"context_lines":[{"line_number":115,"context_line":"References"},{"line_number":116,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"`DMTF Cloud Auditing Data Federation (CADF) Open Standard"},{"line_number":119,"context_line":"\u003chttp://docs.openstack.org/developer/pycadf/\u003e`_ "}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_39a512a2","line":118,"updated":"2014-06-03 21:04:03.000000000","message":"i initially thought this would like me to the spec, but the link is for the pycadf library. \n\nCan we link both? And name them accordingly.","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"c0a7dbfd263562f65636c53252074704b031ca7a","unresolved":false,"context_lines":[{"line_number":115,"context_line":"References"},{"line_number":116,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"`DMTF Cloud Auditing Data Federation (CADF) Open Standard"},{"line_number":119,"context_line":"\u003chttp://docs.openstack.org/developer/pycadf/\u003e`_ "}],"source_content_type":"text/x-rst","patch_set":1,"id":"1ae5cdf2_94387fef","line":118,"in_reply_to":"1ae5cdf2_39a512a2","updated":"2014-06-12 16:16:25.000000000","message":"Done","commit_id":"ee2ba8d122b80c79a256e680569ed177fcc183f8"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"70b0e72ae394297374455144ebc42c4afa393540","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"Audit Support for Keystone Federation"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"`bp audit-support-for-federation"},{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_afd366d3","line":9,"updated":"2014-06-12 17:54:47.000000000","message":"nit: header \u003d\u003d\u003d should be the same length as the title text: \n\n    \t\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\n\tAudit Support for Keystone Federation\n    \t\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":6,"context_line":""},{"line_number":7,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":8,"context_line":"Audit Support for Keystone Federation"},{"line_number":9,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":10,"context_line":""},{"line_number":11,"context_line":"`bp audit-support-for-federation"},{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_9256ca28","line":9,"in_reply_to":"1ae5cdf2_afd366d3","updated":"2014-06-12 20:22:14.000000000","message":"oops! good catch","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"c7c6e2fde513969d3bebecb30fe04ae0868a28ab","unresolved":false,"context_lines":[{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/"},{"line_number":13,"context_line":"audit-support-for-federation\u003e`_"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Keystone is expanding its support for federated identity to enable it to more"},{"line_number":16,"context_line":"seamlessly integrate into enterprise environments and to leverage existing"},{"line_number":17,"context_line":"identity providers. The extra complexity associated with authentication and"},{"line_number":18,"context_line":"authorization in federated Keystone deployments demands suitable audit support"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_a6163047","line":15,"updated":"2014-06-12 17:21:44.000000000","message":"(NIT): remove more or change \u0027more seamlessly integrate\u0027  to \u0027have a more seamless integration\u0027","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":12,"context_line":"\u003chttps://blueprints.launchpad.net/keystone/+spec/"},{"line_number":13,"context_line":"audit-support-for-federation\u003e`_"},{"line_number":14,"context_line":""},{"line_number":15,"context_line":"Keystone is expanding its support for federated identity to enable it to more"},{"line_number":16,"context_line":"seamlessly integrate into enterprise environments and to leverage existing"},{"line_number":17,"context_line":"identity providers. The extra complexity associated with authentication and"},{"line_number":18,"context_line":"authorization in federated Keystone deployments demands suitable audit support"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_d233f211","line":15,"in_reply_to":"1ae5cdf2_a6163047","updated":"2014-06-12 20:22:14.000000000","message":"Done","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"70b0e72ae394297374455144ebc42c4afa393540","unresolved":false,"context_lines":[{"line_number":27,"context_line":"For Keystone, we need to define and implement support for new CADF audit event"},{"line_number":28,"context_line":"records that capture the authentication and authorization behavior associated"},{"line_number":29,"context_line":"with the mapping of federated attributes to group-based role assignments. Also,"},{"line_number":30,"context_line":"for auditing purposes, we also need to capture the user identity information"},{"line_number":31,"context_line":"that is derived from external identity providers. This is crucial because in"},{"line_number":32,"context_line":"the federated identity model for Keystone, user information is ephemeral and"},{"line_number":33,"context_line":"no longer stored in Keystone directly."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_493c9dc8","line":30,"updated":"2014-06-12 17:54:47.000000000","message":"remove the second \u0027also\u0027","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":27,"context_line":"For Keystone, we need to define and implement support for new CADF audit event"},{"line_number":28,"context_line":"records that capture the authentication and authorization behavior associated"},{"line_number":29,"context_line":"with the mapping of federated attributes to group-based role assignments. Also,"},{"line_number":30,"context_line":"for auditing purposes, we also need to capture the user identity information"},{"line_number":31,"context_line":"that is derived from external identity providers. This is crucial because in"},{"line_number":32,"context_line":"the federated identity model for Keystone, user information is ephemeral and"},{"line_number":33,"context_line":"no longer stored in Keystone directly."}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_f2362e02","line":30,"in_reply_to":"1ae5cdf2_493c9dc8","updated":"2014-06-12 20:22:14.000000000","message":"Done","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"70b0e72ae394297374455144ebc42c4afa393540","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_e952c911","line":40,"updated":"2014-06-12 17:54:47.000000000","message":"Link to the blueprint this work was tied to?","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"abd9779856d725861d17b940ee095c538dbf66b9","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_e304aa16","line":40,"updated":"2014-06-12 16:41:35.000000000","message":"do we need to add some more details here? i.e. what\u0027s in these events? Like identity attributes we received ingressing and egressing the mapping layer.","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"c7c6e2fde513969d3bebecb30fe04ae0868a28ab","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_c676dca3","line":40,"in_reply_to":"1ae5cdf2_0325165b","updated":"2014-06-12 17:21:44.000000000","message":"(NIT): from the Icehouse release.","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_1d572bcb","line":40,"in_reply_to":"1ae5cdf2_0325165b","updated":"2014-06-12 20:22:14.000000000","message":"I can write \"refer to notifications impact below\".","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_bdfc77b6","line":40,"in_reply_to":"1ae5cdf2_c676dca3","updated":"2014-06-12 20:22:14.000000000","message":"Done","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_7df66fd8","line":40,"in_reply_to":"1ae5cdf2_e304aa16","updated":"2014-06-12 20:22:14.000000000","message":"@Guang, yes, good call.\n\nI imagine that, at a minimum we would include the details we are already including in the token, like group_ids that the user was mapped to, username, userid, the identity provider, and the protocol used.","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":8978,"name":"Marek Denis","email":"marek.denis+openstack@gmail.com","username":"marek-denis"},"change_message_id":"69bf9096b2082e9edf9c176bdd435cfc1dde93b3","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_0325165b","line":40,"in_reply_to":"1ae5cdf2_e304aa16","updated":"2014-06-12 16:53:08.000000000","message":"At least some link to \u0027Notifications Impact\u0027 pointing user to the list of new CADF events could be useful.","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":37,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":38,"context_line":"Proposed change is to add new CADF based audit event notifications for"},{"line_number":39,"context_line":"operations associated with federated identity. We intend to reuse the existing"},{"line_number":40,"context_line":"notification work from last release."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"Alternatives"},{"line_number":43,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_dd2ea342","line":40,"in_reply_to":"1ae5cdf2_e952c911","updated":"2014-06-12 20:22:14.000000000","message":"Done","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"c7c6e2fde513969d3bebecb30fe04ae0868a28ab","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"* Federated user attempts to retrieve a list of domains."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"* Federated user attempts to retrieve a scoped token."},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Other End User Impact"},{"line_number":72,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_a65b9020","line":69,"updated":"2014-06-12 17:21:44.000000000","message":"Are there any other cases? Updates?\n\nHow far should the CADF notifications go?","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"f372af273eac7b595ed09755f21708c37c02064e","unresolved":false,"context_lines":[{"line_number":66,"context_line":""},{"line_number":67,"context_line":"* Federated user attempts to retrieve a list of domains."},{"line_number":68,"context_line":""},{"line_number":69,"context_line":"* Federated user attempts to retrieve a scoped token."},{"line_number":70,"context_line":""},{"line_number":71,"context_line":"Other End User Impact"},{"line_number":72,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":2,"id":"1ae5cdf2_ddbce3de","line":69,"in_reply_to":"1ae5cdf2_a65b9020","updated":"2014-06-12 20:22:14.000000000","message":"@morgan, updates for what?","commit_id":"80fe9b33577d2b3e4f7df36dcb41adb7652207b2"},{"author":{"_account_id":6486,"name":"Brant Knudson","email":"blk@acm.org","username":"blk-u"},"change_message_id":"598b093b104a763d09f90eefa3f4298055f36bd8","unresolved":false,"context_lines":[{"line_number":46,"context_line":"mapped to, should be included within the notification."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"For more details on what actions will trigger a notifications, please refer"},{"line_number":49,"context_line":"to the `Notifications Impact`_ section of this specification."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"Alternatives"},{"line_number":52,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_bd28f797","line":49,"updated":"2014-06-12 20:31:47.000000000","message":"Do we have versioning of the notifications? Seems like we should have a notifications spec like we have an API spec.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"3044fd1ee4b9426de4271947988b9a715e72d2f7","unresolved":false,"context_lines":[{"line_number":46,"context_line":"mapped to, should be included within the notification."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"For more details on what actions will trigger a notifications, please refer"},{"line_number":49,"context_line":"to the `Notifications Impact`_ section of this specification."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"Alternatives"},{"line_number":52,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_7f79de91","line":49,"in_reply_to":"1ae5cdf2_6f9874c0","updated":"2014-06-13 23:27:54.000000000","message":"I agree with guang here. If we had our own notification framework for audit we would need a spec, if we\u0027re using CADF, we use that specification.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"e7a300f941a6ae2037c6b5c5e0f458970f61e69d","unresolved":false,"context_lines":[{"line_number":46,"context_line":"mapped to, should be included within the notification."},{"line_number":47,"context_line":""},{"line_number":48,"context_line":"For more details on what actions will trigger a notifications, please refer"},{"line_number":49,"context_line":"to the `Notifications Impact`_ section of this specification."},{"line_number":50,"context_line":""},{"line_number":51,"context_line":"Alternatives"},{"line_number":52,"context_line":"------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_6f9874c0","line":49,"in_reply_to":"1ae5cdf2_bd28f797","updated":"2014-06-12 21:32:01.000000000","message":"Probably versioning the payload. But since it uses the existing notification framework, the work should be in a bigger scope instead of here I would think.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"3044fd1ee4b9426de4271947988b9a715e72d2f7","unresolved":false,"context_lines":[{"line_number":69,"context_line":"--------------------"},{"line_number":70,"context_line":"New CADF notifications will need to be created for the following events:"},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* Federated user attempts to retrieve an unscoped token."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Federated user attempts to retrieve a list of projects."},{"line_number":75,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_d9504d60","line":72,"updated":"2014-06-13 23:27:54.000000000","message":"It is not clear to me if this is meant to say CADF notification of token validation (HTTP GET or HEAD) for a specific unscoped token or if this is an attempt to authenticate and be issued a token.\n\nI assume this is authentication based upon the specification of scoped vs unscoped, but I would like this to be as clear as possible so there is no confusion on reviewing the implementation.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"471fd7a46c3305679b182e297b5277a1735ea7a8","unresolved":false,"context_lines":[{"line_number":69,"context_line":"--------------------"},{"line_number":70,"context_line":"New CADF notifications will need to be created for the following events:"},{"line_number":71,"context_line":""},{"line_number":72,"context_line":"* Federated user attempts to retrieve an unscoped token."},{"line_number":73,"context_line":""},{"line_number":74,"context_line":"* Federated user attempts to retrieve a list of projects."},{"line_number":75,"context_line":""}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_31bf7dd1","line":72,"in_reply_to":"1ae5cdf2_d9504d60","updated":"2014-06-15 03:56:35.000000000","message":"definitely referring to the latter case.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"},{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"3044fd1ee4b9426de4271947988b9a715e72d2f7","unresolved":false,"context_lines":[{"line_number":75,"context_line":""},{"line_number":76,"context_line":"* Federated user attempts to retrieve a list of domains."},{"line_number":77,"context_line":""},{"line_number":78,"context_line":"* Federated user attempts to retrieve a scoped token."},{"line_number":79,"context_line":""},{"line_number":80,"context_line":"Other End User Impact"},{"line_number":81,"context_line":"---------------------"}],"source_content_type":"text/x-rst","patch_set":3,"id":"1ae5cdf2_f94b49ae","line":78,"updated":"2014-06-13 23:27:54.000000000","message":"Same as above.","commit_id":"4e81cb62c12110b1e5ada9e48814ef398bd3a64f"}]}