)]}'
{"etc/policy.v3cloudsample.json":[{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"6bcc6637c547fa55e1d7c4ca9019931f198c5635","unresolved":false,"context_lines":[{"line_number":99,"context_line":"    \"identity:list_role_inference_rules\": \"rule:cloud_admin\","},{"line_number":100,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_d093f84d","line":102,"updated":"2016-02-11 07:48:23.000000000","message":"you use \u0027dsr\u0027 here too","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"04a58f4238c03325746de66cdbc7014d76f1cc92","unresolved":false,"context_lines":[{"line_number":99,"context_line":"    \"identity:list_role_inference_rules\": \"rule:cloud_admin\","},{"line_number":100,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_632edc44","line":102,"in_reply_to":"3a57f1b5_d093f84d","updated":"2016-02-11 17:49:53.000000000","message":"Done","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"108b269feb7bed749c1b01b46f49efb34d02ccfa","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_c4bb65c3","line":103,"updated":"2016-02-10 16:00:48.000000000","message":"This is the first time I have seen None used in these rules.  Will we be providing documentation that explains these new domain_admin rules?  I always felt that policy was hard for folks to embrace because the json does not allow comments and people would have a hard time finding documentation that explains the policy syntax and semantics","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"04a58f4238c03325746de66cdbc7014d76f1cc92","unresolved":false,"context_lines":[{"line_number":100,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_c31550e5","line":103,"in_reply_to":"3a57f1b5_c4bb65c3","updated":"2016-02-11 17:49:53.000000000","message":"I\u0027ll commit to writing up a v3cloudsamplepolicyrules.rst if we don\u0027t find a way  of getting comments into police files (e.g. yaml)","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"108b269feb7bed749c1b01b46f49efb34d02ccfa","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_24035944","line":104,"updated":"2016-02-10 16:00:48.000000000","message":"what is a dsr grant?","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"950f8b8eeb86b51a351fef3e9cecdb2a2ba48012","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_662b9131","line":104,"in_reply_to":"3a57f1b5_24035944","updated":"2016-02-10 17:16:49.000000000","message":"I guess it stands for \"domain specific roles\", but will certainly confuse people","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"04a58f4238c03325746de66cdbc7014d76f1cc92","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_8333d8aa","line":104,"in_reply_to":"3a57f1b5_5079482e","updated":"2016-02-11 17:49:53.000000000","message":"Done","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"090db0d09e37dc7036910adcccf85395e676eb5d","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_c6c84577","line":104,"in_reply_to":"3a57f1b5_662b9131","updated":"2016-02-10 17:17:46.000000000","message":"oops, sorry, I meant to spell that one out too....","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"6bcc6637c547fa55e1d7c4ca9019931f198c5635","unresolved":false,"context_lines":[{"line_number":101,"context_line":""},{"line_number":102,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_dsr_grants\","},{"line_number":103,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":104,"context_line":"    \"domain_admin_for_dsr_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":105,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_5079482e","line":104,"in_reply_to":"3a57f1b5_c6c84577","updated":"2016-02-11 07:48:23.000000000","message":"i\u0027d say drop the \"specific\" -- \"domain_admin_for_domain_role_grants\"","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"6bcc6637c547fa55e1d7c4ca9019931f198c5635","unresolved":false,"context_lines":[{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","},{"line_number":108,"context_line":"    \"project_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":109,"context_line":"    \"project_admin_for_dsr_grants\": \"rule:admin_required and project_domain_id:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":110,"context_line":"    \"project_admin_for_list_grants\": \"rule:admin_required and project_id:%(project_id)s\","},{"line_number":111,"context_line":" "},{"line_number":112,"context_line":"    \"identity:check_grant\": \"rule:cloud_admin or rule:domain_admin_for_grants or rule:project_admin_for_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_50a06890","line":109,"range":{"start_line":109,"start_character":23,"end_line":109,"end_character":26},"updated":"2016-02-11 07:48:23.000000000","message":"and here","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"04a58f4238c03325746de66cdbc7014d76f1cc92","unresolved":false,"context_lines":[{"line_number":106,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_dsr_grants\","},{"line_number":108,"context_line":"    \"project_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":109,"context_line":"    \"project_admin_for_dsr_grants\": \"rule:admin_required and project_domain_id:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":110,"context_line":"    \"project_admin_for_list_grants\": \"rule:admin_required and project_id:%(project_id)s\","},{"line_number":111,"context_line":" "},{"line_number":112,"context_line":"    \"identity:check_grant\": \"rule:cloud_admin or rule:domain_admin_for_grants or rule:project_admin_for_grants\","}],"source_content_type":"application/json","patch_set":15,"id":"3a57f1b5_2324645e","line":109,"range":{"start_line":109,"start_character":23,"end_line":109,"end_character":26},"in_reply_to":"3a57f1b5_50a06890","updated":"2016-02-11 17:49:53.000000000","message":"Done","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"ce117dbc8ab359537643a2b8a922ff629ac314dc","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    \"identity:list_role_inference_rules\": \"rule:cloud_admin\","},{"line_number":102,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_domain_role_grants\","},{"line_number":105,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":106,"context_line":"    \"domain_admin_for_domain_role_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":108,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":109,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_domain_role_grants\","},{"line_number":110,"context_line":"    \"project_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":111,"context_line":"    \"project_admin_for_domain_role_grants\": \"rule:admin_required and project_domain_id:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":112,"context_line":"    \"project_admin_for_list_grants\": \"rule:admin_required and project_id:%(project_id)s\","},{"line_number":113,"context_line":" "},{"line_number":114,"context_line":"    \"identity:check_grant\": \"rule:cloud_admin or rule:domain_admin_for_grants or rule:project_admin_for_grants\","},{"line_number":115,"context_line":"    \"identity:list_grants\": \"rule:cloud_admin or rule:domain_admin_for_list_grants or rule:project_admin_for_list_grants\","}],"source_content_type":"application/json","patch_set":16,"id":"3a57f1b5_104dd7c3","line":112,"range":{"start_line":104,"start_character":4,"end_line":112,"end_character":89},"updated":"2016-02-12 03:05:23.000000000","message":"Ouch! My head hurts trying to wrap around this. Should we move this logic to the code instead? With plenty of inline comments of course. Also, I am not sure how the \"Common Policy Scenario\" people feels about this one. Looks like they are push policy.json to contain only rules and public (namespaced) APIs. I could be wrong though. Just need to be clear on the direction.","commit_id":"4c8ce8579b8a9c781cb0271be2fa30e726d5107e"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"d8effd395ee7b94f75196e4c38d5f93da3d092a6","unresolved":false,"context_lines":[{"line_number":101,"context_line":"    \"identity:list_role_inference_rules\": \"rule:cloud_admin\","},{"line_number":102,"context_line":"    \"identity:check_implied_role\": \"rule:cloud_admin\","},{"line_number":103,"context_line":""},{"line_number":104,"context_line":"    \"domain_admin_for_grants\": \"rule:domain_admin_for_global_role_grants or rule:domain_admin_for_domain_role_grants\","},{"line_number":105,"context_line":"    \"domain_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":106,"context_line":"    \"domain_admin_for_domain_role_grants\": \"rule:admin_required and domain_id:%(target.role.domain_id)s and rule:domain_admin_grant_match\","},{"line_number":107,"context_line":"    \"domain_admin_grant_match\": \"domain_id:%(domain_id)s or domain_id:%(target.project.domain_id)s\","},{"line_number":108,"context_line":"    \"domain_admin_for_list_grants\": \"rule:admin_required and rule:domain_admin_grant_match\","},{"line_number":109,"context_line":"    \"project_admin_for_grants\": \"rule:project_admin_for_global_role_grants or rule:project_admin_for_domain_role_grants\","},{"line_number":110,"context_line":"    \"project_admin_for_global_role_grants\": \"rule:admin_required and None:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":111,"context_line":"    \"project_admin_for_domain_role_grants\": \"rule:admin_required and project_domain_id:%(target.role.domain_id)s and project_id:%(project_id)s\","},{"line_number":112,"context_line":"    \"project_admin_for_list_grants\": \"rule:admin_required and project_id:%(project_id)s\","},{"line_number":113,"context_line":" "},{"line_number":114,"context_line":"    \"identity:check_grant\": \"rule:cloud_admin or rule:domain_admin_for_grants or rule:project_admin_for_grants\","},{"line_number":115,"context_line":"    \"identity:list_grants\": \"rule:cloud_admin or rule:domain_admin_for_list_grants or rule:project_admin_for_list_grants\","}],"source_content_type":"application/json","patch_set":16,"id":"3a57f1b5_dead099c","line":112,"range":{"start_line":104,"start_character":4,"end_line":112,"end_character":89},"in_reply_to":"3a57f1b5_104dd7c3","updated":"2016-02-12 09:06:15.000000000","message":"So I really don\u0027t want to stop deployers defining these rules in policy files (more specifically, the ability to do it without modifying code). The common policy scenario is never going to work for keystone without modification (which is expected, I believe, from the common policy scenario), we are the odd ball from that point of view.\n\nWhat I will do is re-oder the above to make it flow a bit more logically...","commit_id":"4c8ce8579b8a9c781cb0271be2fa30e726d5107e"}],"releasenotes/notes/DomainSpecificRoles-fc5dd2ef74a1442c.yaml":[{"author":{"_account_id":6460,"name":"Brad Topol","email":"btopol@us.ibm.com","username":"btopol"},"change_message_id":"108b269feb7bed749c1b01b46f49efb34d02ccfa","unresolved":false,"context_lines":[{"line_number":8,"context_line":"    domain specific role can be assigned to a domain or project within its"},{"line_number":9,"context_line":"    domain, and any subset of global roles it implies will appear in a token"},{"line_number":10,"context_line":"    scoped to the respective domain or project. The domain specific role"},{"line_number":11,"context_line":"    itself, however, will not appear in the token."}],"source_content_type":"text/x-yaml","patch_set":15,"id":"3a57f1b5_d76235d8","line":11,"updated":"2016-02-10 16:00:48.000000000","message":"So what would be a huge help here is if the release note provided a URL link to something that provides a description of the new domain_admin rules you added.  Since we cannot put comments in the policy file we need documentation that explains these new rules and this dos needs to be very easy to find.","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"04a58f4238c03325746de66cdbc7014d76f1cc92","unresolved":false,"context_lines":[{"line_number":8,"context_line":"    domain specific role can be assigned to a domain or project within its"},{"line_number":9,"context_line":"    domain, and any subset of global roles it implies will appear in a token"},{"line_number":10,"context_line":"    scoped to the respective domain or project. The domain specific role"},{"line_number":11,"context_line":"    itself, however, will not appear in the token."}],"source_content_type":"text/x-yaml","patch_set":15,"id":"3a57f1b5_c35d5016","line":11,"in_reply_to":"3a57f1b5_d76235d8","updated":"2016-02-11 17:49:53.000000000","message":"I\u0027ll commit to writing up a v3cloudsamplepolicyrules.rst if we don\u0027t find a way  of getting comments into police files (e.g. yaml)","commit_id":"18cf468d8dda56db2045fef4cb33df883cb05ee1"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"a197ca6c0e90f4dd43abd7922afc951393109278","unresolved":false,"context_lines":[{"line_number":7,"context_line":"    a domain to build their own private inference rules with implies roles. A"},{"line_number":8,"context_line":"    domain specific role can be assigned to a domain or project within its"},{"line_number":9,"context_line":"    domain, and any subset of global roles it implies will appear in a token"},{"line_number":10,"context_line":"    scoped to the respective domain or project. The domain specific role"},{"line_number":11,"context_line":"    itself, however, will not appear in the token."}],"source_content_type":"text/x-yaml","patch_set":19,"id":"dae33548_539dffba","line":11,"range":{"start_line":10,"start_character":48,"end_line":11,"end_character":49},"updated":"2016-02-17 08:20:09.000000000","message":"suggest you add why they will not appear in the token.","commit_id":"a4e9ea5fef805e0fb27be9d0e3be856021c772ef"}]}