)]}'
{"etc/policy.json":[{"author":{"_account_id":9098,"name":"Nathan Kinder","email":"nkinder@redhat.com","username":"nkinder"},"change_message_id":"6405fea78978b425d3e09c13be5da11e20dffb28","unresolved":false,"context_lines":[{"line_number":14,"context_line":"    \"identity:list_regions\": \"\","},{"line_number":15,"context_line":"    \"identity:create_region\": \"rule:admin_or_cloud_admin\","},{"line_number":16,"context_line":"    \"identity:update_region\": \"rule:admin_or_cloud_admin\","},{"line_number":17,"context_line":"    \"identity:delete_region\": \"rule:admin_or_cloud_admin\","},{"line_number":18,"context_line":""},{"line_number":19,"context_line":"    \"identity:get_service\": \"rule:admin_or_cloud_admin\","},{"line_number":20,"context_line":"    \"identity:list_services\": \"rule:admin_or_cloud_admin\","}],"source_content_type":"application/json","patch_set":2,"id":"baa201ad_463d8f8e","line":17,"updated":"2014-10-15 23:30:28.000000000","message":"I think that these should be restricted to the \"cloud_admin\" rule only.  We don\u0027t want project admins performing write operations against regions.  See my related patch to the existing domain-aware v3 policy:\n\n  https://review.openstack.org/128788","commit_id":"d12f5a53edd6e3696608c533f59e3a96cc8ce2a7"}]}