)]}'
{"keystone/assignment/core.py":[{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"9e1f94233183f39e469d2e145fc5cdb3be96e414","unresolved":false,"context_lines":[{"line_number":570,"context_line":"                if domain_id:"},{"line_number":571,"context_line":"                    hints \u003d driver_hints.Hints()"},{"line_number":572,"context_line":"                    hints.add_filter(\u0027domain_id\u0027, domain_id)"},{"line_number":573,"context_line":"                for user in self.identity_api.list_users_in_group(group_id,"},{"line_number":574,"context_line":"                                                                  hints):"},{"line_number":575,"context_line":"                    if user[\u0027id\u0027] !\u003d user_id:"},{"line_number":576,"context_line":"                        self._emit_invalidate_user_token_persistence("}],"source_content_type":"text/x-python","patch_set":1,"id":"da9df570_faef3985","line":573,"updated":"2014-09-24 14:24:19.000000000","message":"...actually, I think the correct fix is to not pass hints or domain_id in.  My rationale is:\n\n1) Any user that is part of this group might have gotten a token to this domain anyway.....irrespective as to whether they are in that domain\n\n2) A backend identity driver does not have to honor hints(), it is best effort (so, in general, hints should only be used for calls that come in via the controller since the controller wrappers will apply any un-implemented hints filters)","commit_id":"041a01159e7ecdbb83b0a3ba14cc82ca741c8cef"}]}