)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":6534,"name":"David Chadwick","email":"d.w.chadwick@truetrust.co.uk","username":"d-w-chadwick"},"change_message_id":"1c191c2ad471753c61d2ee8db9c30ef7c8946c0c","unresolved":false,"context_lines":[{"line_number":5,"context_line":"CommitDate: 2014-11-25 22:44:21 -0300"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Allow users to change own default_project_id"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Change the default policy.json, allowing a user to set"},{"line_number":10,"context_line":"his/her own default_project_id."},{"line_number":11,"context_line":"A test for this use case is added as well."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"5a890539_a47dfd1d","line":8,"updated":"2014-11-26 14:09:11.000000000","message":"Sorry but I seem to have missed the design document that outlined this proposed change, and in particular the security impact of letting a user change his own project id. \n\nWhat safeguards are there to stop a user escalating his privileges by saying he is a member of a project that he is not a member of?","commit_id":"9058a4e54ce6d93ed880302ec009e9fe6a89e9e8"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"37b73bc3ab82e0580501bb6484250372627342a2","unresolved":false,"context_lines":[{"line_number":5,"context_line":"CommitDate: 2014-11-25 22:44:21 -0300"},{"line_number":6,"context_line":""},{"line_number":7,"context_line":"Allow users to change own default_project_id"},{"line_number":8,"context_line":""},{"line_number":9,"context_line":"Change the default policy.json, allowing a user to set"},{"line_number":10,"context_line":"his/her own default_project_id."},{"line_number":11,"context_line":"A test for this use case is added as well."}],"source_content_type":"text/x-gerrit-commit-message","patch_set":1,"id":"5a890539_278ca62e","line":8,"in_reply_to":"5a890539_a47dfd1d","updated":"2014-12-05 07:25:44.000000000","message":"I think the user could only be able to change his/her default_project_id if to a project he/she has at least one role there, makes sense?\n\nAnyway, I\u0027ll put a discussion on irc today to decide if we really want this feature and how should be implemented. Thank you to pointing this out.","commit_id":"9058a4e54ce6d93ed880302ec009e9fe6a89e9e8"}],"keystone/tests/test_v3_identity.py":[{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"7647a8203afa420115faecd14d3799c8e3fc2f6b","unresolved":false,"context_lines":[{"line_number":314,"context_line":"        r \u003d self.patch(\u0027/users/%(user_id)s\u0027 % {\u0027user_id\u0027: user[\u0027id\u0027]},"},{"line_number":315,"context_line":"                       body\u003d{\u0027user\u0027: user},"},{"line_number":316,"context_line":"                       token\u003duser_token)"},{"line_number":317,"context_line":"        self.assertValidUserResponse(r, user)"},{"line_number":318,"context_line":""},{"line_number":319,"context_line":"    def test_delete_user(self):"},{"line_number":320,"context_line":"        \"\"\"Call ``DELETE /users/{user_id}``."}],"source_content_type":"text/x-python","patch_set":1,"id":"5a890539_30d4f4e7","line":317,"updated":"2014-11-26 11:59:00.000000000","message":"what is expected behaviour when you update the default_project_id, regarding the access? The default assignment disappears? Should test the user hasn\u0027t access to the old default_project_id or if the access remains unchanged after the update.","commit_id":"9058a4e54ce6d93ed880302ec009e9fe6a89e9e8"},{"author":{"_account_id":9142,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@lsd.ufcg.edu.br","username":"samuel-z","inactive":true},"change_message_id":"37b73bc3ab82e0580501bb6484250372627342a2","unresolved":false,"context_lines":[{"line_number":314,"context_line":"        r \u003d self.patch(\u0027/users/%(user_id)s\u0027 % {\u0027user_id\u0027: user[\u0027id\u0027]},"},{"line_number":315,"context_line":"                       body\u003d{\u0027user\u0027: user},"},{"line_number":316,"context_line":"                       token\u003duser_token)"},{"line_number":317,"context_line":"        self.assertValidUserResponse(r, user)"},{"line_number":318,"context_line":""},{"line_number":319,"context_line":"    def test_delete_user(self):"},{"line_number":320,"context_line":"        \"\"\"Call ``DELETE /users/{user_id}``."}],"source_content_type":"text/x-python","patch_set":1,"id":"5a890539_27b3c6ed","line":317,"in_reply_to":"5a890539_30d4f4e7","updated":"2014-12-05 07:25:44.000000000","message":"I guess we have to delete the old default assignment... and yes, we have to test the access .. \nThanks for pointing this out","commit_id":"9058a4e54ce6d93ed880302ec009e9fe6a89e9e8"}]}