)]}'
{"id":"openstack%2Fkeystone~12870","triplet_id":"openstack%2Fkeystone~stable%2Fessex~Ib11b5b3a933c6000afe0c875c3f71f1f101bb202","project":"openstack/keystone","branch":"stable/essex","topic":"bug/1041396","hashtags":[],"change_id":"Ib11b5b3a933c6000afe0c875c3f71f1f101bb202","subject":"Delete user tokens after role grant/revoke","status":"MERGED","created":"2012-09-12 12:04:01.000000000","updated":"2012-09-12 16:35:37.000000000","submitted":"2012-09-12 16:35:37.000000000","submitter":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"total_comment_count":0,"unresolved_comment_count":0,"has_review_started":true,"meta_rev_id":"cc49599e55e5a10ecf3d7d1b52779c3accbcc097","_number":12870,"virtual_id_number":12870,"owner":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"actions":{},"labels":{"Verified":{"approved":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"all":[{"value":0,"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},{"value":0,"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},{"value":0,"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"},{"value":0,"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},{"value":0,"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"value":0,"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},{"value":0,"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":2,"date":"2012-09-12 16:35:37.000000000","_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-2":"Fails","-1":"Doesn\u0027t seem to work"," 0":"No score","+1":"Works for me","+2":"Verified"},"description":"","default_value":0,"optional":true},"Code-Review":{"approved":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"recommended":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"all":[{"value":0,"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},{"value":0,"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},{"value":0,"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"},{"value":1,"date":"2012-09-12 14:46:44.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},{"value":2,"date":"2012-09-12 16:05:46.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"value":0,"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},{"value":2,"date":"2012-09-12 15:25:15.000000000","permitted_voting_range":{"min":2,"max":2},"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-2":"Do not merge","-1":"This patch needs further work before it can be merged"," 0":"No score","+1":"Looks good to me, but someone else must approve","+2":"Looks good to me (core reviewer)"},"description":"","value":1,"default_value":0,"optional":true},"Workflow":{"approved":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"all":[{"value":0,"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},{"value":0,"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},{"value":0,"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"},{"value":0,"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},{"value":1,"date":"2012-09-12 16:05:46.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"value":0,"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},{"value":1,"date":"2012-09-12 15:25:15.000000000","permitted_voting_range":{"min":1,"max":1},"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"value":0,"_account_id":3,"name":"Jenkins","username":"jenkins"}],"values":{"-1":"Work in progress"," 0":"Ready for reviews","+1":"Approved"},"description":"","default_value":0,"optional":true}},"removable_reviewers":[],"reviewers":{"REVIEWER":[{"_account_id":3,"name":"Jenkins","username":"jenkins"},{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},{"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},{"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},{"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},{"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"}]},"pending_reviewers":{},"reviewer_updates":[{"updated":"2012-09-12 12:07:10.000000000","updated_by":{"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"},"reviewer":{"_account_id":2218,"name":"Adam Young","email":"adam@younglogic.com","username":"ayoung"},"state":"REVIEWER"},{"updated":"2012-09-12 12:07:14.000000000","updated_by":{"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},"reviewer":{"_account_id":6,"name":"Joe Heck","email":"heckj@mac.com","username":"heckj"},"state":"REVIEWER"},{"updated":"2012-09-12 12:07:19.000000000","updated_by":{"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},"reviewer":{"_account_id":1561,"name":"Russell Bryant","email":"rbryant@redhat.com","username":"russellb"},"state":"REVIEWER"},{"updated":"2012-09-12 12:07:22.000000000","updated_by":{"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},"reviewer":{"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},"state":"REVIEWER"},{"updated":"2012-09-12 14:46:44.000000000","updated_by":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"reviewer":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"state":"REVIEWER"},{"updated":"2012-09-12 15:25:15.000000000","updated_by":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"reviewer":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"state":"REVIEWER"},{"updated":"2012-09-12 16:35:37.000000000","updated_by":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"reviewer":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"state":"REVIEWER"}],"messages":[{"id":"0ed4c33575b7f3e395cebff6d269dee561dbf029","author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"date":"2012-09-12 12:23:14.000000000","message":"Patch Set 1:\n\nlgtm","accounts_in_message":[],"_revision_number":1},{"id":"91e2d3601d3877040564b30e6bb238cf3a420623","author":{"_account_id":1247,"name":"Mark McLoughlin","email":"markmc@redhat.com","username":"markmc"},"date":"2012-09-12 13:50:20.000000000","message":"Patch Set 1:\n\nHmm, can we get a more detailed commit message?","accounts_in_message":[],"_revision_number":1},{"id":"7be31d2d37815794432c4b6ff1f42ab5cd982c6d","author":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"date":"2012-09-12 14:36:27.000000000","message":"Uploaded patch set 2.","accounts_in_message":[],"_revision_number":2},{"id":"51b64772c8c56efdf57ad724990df3455983d06f","author":{"_account_id":5494,"name":"Trivial Rebase","email":"trivial-rebase@review.openstack.org","username":"trivial-rebase"},"date":"2012-09-12 14:36:33.000000000","message":"Patch Set 2:\n\nNew patchset patch-id matches previous patchset, but commit message has changed.","accounts_in_message":[],"_revision_number":2},{"id":"2a1bbae651591e04a16b234d322e30c2b01e9764","author":{"_account_id":4,"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","username":"dolph"},"date":"2012-09-12 14:46:44.000000000","message":"Patch Set 2: Looks good to me, but someone else must approve\n\n","accounts_in_message":[],"_revision_number":2},{"id":"7e16de47c37334defaeb77c17196bcd8d8871ce9","author":{"_account_id":1955,"name":"Alan Pevec","email":"alan.pevec@redhat.com","username":"apevec"},"date":"2012-09-12 15:25:15.000000000","message":"Patch Set 2: Looks good to me (core reviewer); Approved\n\n","accounts_in_message":[],"_revision_number":2},{"id":"dc30185d82d3f5883dd3079fdf74c6fcab1ba20f","author":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"date":"2012-09-12 16:05:46.000000000","message":"Patch Set 2: Looks good to me (core reviewer); Approved\n\nreverify","accounts_in_message":[],"_revision_number":2},{"id":"8eaec0b15769534326890145ed3953b22adf5b04","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2012-09-12 16:05:47.000000000","message":"Patch Set 2:\n\nStarting gate jobs.","accounts_in_message":[],"_revision_number":2},{"id":"f17294f054e17aea94bddc529bb4521c0ec104c4","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2012-09-12 16:35:37.000000000","message":"Patch Set 2: Verified\n\nBuild successful\n\n- http://logs.openstack.org/12870/2/gate/gate-keystone-merge/1886 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-keystone-docs/388 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-keystone-pep8/1903 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-keystone-python26/932 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-keystone-python27/931 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-tempest-devstack-vm/11325 : SUCCESS\n- http://logs.openstack.org/12870/2/gate/gate-tempest-devstack-vm-cinder/1306 : SUCCESS\n","accounts_in_message":[],"_revision_number":2},{"id":"22ca2f8a83a7a01eb6373e9b014feffd58200da6","author":{"_account_id":3,"name":"Jenkins","username":"jenkins"},"date":"2012-09-12 16:35:37.000000000","message":"Change has been successfully merged into the git repository.","accounts_in_message":[],"_revision_number":2}],"current_revision_number":2,"current_revision":"58ac6691a21675be9e2ffb0f84a05fc3cd4d2e2e","revisions":{"6bdc5af7ead347e1ec5b797b0610a49936bbcd91":{"kind":"REWORK","_number":1,"created":"2012-09-12 12:04:01.000000000","uploader":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"ref":"refs/changes/70/12870/1","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/70/12870/1","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/1 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/1 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/1 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/70/12870/1"}}},"commit":{"parents":[{"commit":"cd1e48a7d60497c528af6d311bd5048821dc1c07","subject":"List tokens for memcached backend","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/cd1e48a7d60497c528af6d311bd5048821dc1c07"}]}],"author":{"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","date":"2012-09-07 19:55:31.000000000","tz":-300},"committer":{"name":"Thierry Carrez","email":"thierry@openstack.org","date":"2012-09-12 12:03:41.000000000","tz":120},"subject":"Delete user tokens after role grant/revoke (bug 1041396)","message":"Delete user tokens after role grant/revoke (bug 1041396)\n\nChange-Id: Ib11b5b3a933c6000afe0c875c3f71f1f101bb202\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6bdc5af7ead347e1ec5b797b0610a49936bbcd91"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/6bdc5af7ead347e1ec5b797b0610a49936bbcd91"}]},"branch":"refs/heads/stable/essex"},"58ac6691a21675be9e2ffb0f84a05fc3cd4d2e2e":{"kind":"NO_CODE_CHANGE","_number":2,"created":"2012-09-12 14:36:27.000000000","uploader":{"_account_id":308,"name":"Thierry Carrez","email":"thierry@openstack.org","username":"ttx"},"ref":"refs/changes/70/12870/2","fetch":{"anonymous http":{"url":"https://review.opendev.org/openstack/keystone","ref":"refs/changes/70/12870/2","commands":{"Checkout":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/2 \u0026\u0026 git checkout FETCH_HEAD","Cherry Pick":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/2 \u0026\u0026 git cherry-pick FETCH_HEAD","Format Patch":"git fetch https://review.opendev.org/openstack/keystone refs/changes/70/12870/2 \u0026\u0026 git format-patch -1 --stdout FETCH_HEAD","Pull":"git pull https://review.opendev.org/openstack/keystone refs/changes/70/12870/2"}}},"commit":{"parents":[{"commit":"cd1e48a7d60497c528af6d311bd5048821dc1c07","subject":"List tokens for memcached backend","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/cd1e48a7d60497c528af6d311bd5048821dc1c07"}]}],"author":{"name":"Dolph Mathews","email":"dolph.mathews@gmail.com","date":"2012-09-07 19:55:31.000000000","tz":-300},"committer":{"name":"Thierry Carrez","email":"thierry@openstack.org","date":"2012-09-12 14:33:21.000000000","tz":120},"subject":"Delete user tokens after role grant/revoke","message":"Delete user tokens after role grant/revoke\n\nDelete user tokens when a new role is granted or revoked, in order to\nprevent old tokens to continue to be valid for the original set of\nroles for the remainder of the token\u0027s lifespan.\n\nAddresses CVE-2012-4413.\nFixes bug 1041396.\n\nChange-Id: Ib11b5b3a933c6000afe0c875c3f71f1f101bb202\n","web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/58ac6691a21675be9e2ffb0f84a05fc3cd4d2e2e"}],"resolve_conflicts_web_links":[{"name":"gitea","tooltip":"Open in GitWeb","url":"https://opendev.org/openstack/keystone/commit/58ac6691a21675be9e2ffb0f84a05fc3cd4d2e2e"}]},"branch":"refs/heads/stable/essex"}},"requirements":[],"submit_records":[],"submit_requirements":[]}