)]}'
{"releasenotes/notes/implied-roles-026f401adc0f7fb6.yaml":[{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"2fb9ca724c19d083340272d3f301442ac8212407","unresolved":false,"context_lines":[{"line_number":5,"context_line":"   Keystone now supports creating implied roles. Role inference rules can now"},{"line_number":6,"context_line":"   be added to indicate when the assignment of one role implies the assignment"},{"line_number":7,"context_line":"   of another. The rules are of the form ``prior_role`` implies"},{"line_number":8,"context_line":"   ``implied_role``. If a role is assigned a prior role, any token that"},{"line_number":9,"context_line":"   contains that role will also contain all implied roles for that prior role."},{"line_number":10,"context_line":"   This process will continue evaluating additional rules such that one implied"},{"line_number":11,"context_line":"   role can imply additional roles. The expansion of implied roles is"}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5a5ae5dd_f704c34a","line":8,"range":{"start_line":8,"start_character":21,"end_line":8,"end_character":55},"updated":"2016-02-05 08:22:25.000000000","message":"the multiple use/meaning of \"assign\" here and earlier is confusing.","commit_id":"0fe41927a07d75f5e1b852849326bfcd9b54b3da"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"2fb9ca724c19d083340272d3f301442ac8212407","unresolved":false,"context_lines":[{"line_number":7,"context_line":"   of another. The rules are of the form ``prior_role`` implies"},{"line_number":8,"context_line":"   ``implied_role``. If a role is assigned a prior role, any token that"},{"line_number":9,"context_line":"   contains that role will also contain all implied roles for that prior role."},{"line_number":10,"context_line":"   This process will continue evaluating additional rules such that one implied"},{"line_number":11,"context_line":"   role can imply additional roles. The expansion of implied roles is"},{"line_number":12,"context_line":"   controlled by the ``root_role`` option in the ``[assignment]`` section of"},{"line_number":13,"context_line":"   `keystone.conf`."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5a5ae5dd_b7facb41","line":10,"range":{"start_line":10,"start_character":3,"end_line":10,"end_character":15},"updated":"2016-02-05 08:22:25.000000000","message":"what process? Maybe something like:\n\"Any role can act as a prior role, even one that is itself an implied role, allowing multiple levels of inference.\"","commit_id":"0fe41927a07d75f5e1b852849326bfcd9b54b3da"},{"author":{"_account_id":5707,"name":"Henry Nash","email":"henryn@linux.vnet.ibm.com","username":"henry-nash"},"change_message_id":"2fb9ca724c19d083340272d3f301442ac8212407","unresolved":false,"context_lines":[{"line_number":8,"context_line":"   ``implied_role``. If a role is assigned a prior role, any token that"},{"line_number":9,"context_line":"   contains that role will also contain all implied roles for that prior role."},{"line_number":10,"context_line":"   This process will continue evaluating additional rules such that one implied"},{"line_number":11,"context_line":"   role can imply additional roles. The expansion of implied roles is"},{"line_number":12,"context_line":"   controlled by the ``root_role`` option in the ``[assignment]`` section of"},{"line_number":13,"context_line":"   `keystone.conf`."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5a5ae5dd_7733f314","line":11,"range":{"start_line":11,"start_character":3,"end_line":11,"end_character":35},"updated":"2016-02-05 08:22:25.000000000","message":"How about something like:\n\"At token generation time, user/group assignments of roles that have implied roles will be expanded to also include such roles in the token\"","commit_id":"0fe41927a07d75f5e1b852849326bfcd9b54b3da"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"046c3a155a0271f0ad1c7565890ccee5b788e975","unresolved":false,"context_lines":[{"line_number":8,"context_line":"   ``implied_role``. If a role is assigned a prior role, any token that"},{"line_number":9,"context_line":"   contains that role will also contain all implied roles for that prior role."},{"line_number":10,"context_line":"   This process will continue evaluating additional rules such that one implied"},{"line_number":11,"context_line":"   role can imply additional roles. The expansion of implied roles is"},{"line_number":12,"context_line":"   controlled by the ``root_role`` option in the ``[assignment]`` section of"},{"line_number":13,"context_line":"   `keystone.conf`."}],"source_content_type":"text/x-yaml","patch_set":2,"id":"5a5ae5dd_725b01f7","line":11,"range":{"start_line":11,"start_character":3,"end_line":11,"end_character":35},"in_reply_to":"5a5ae5dd_7733f314","updated":"2016-02-05 08:28:08.000000000","message":"this works for me, i\u0027ll remove the entire sentence and use this","commit_id":"0fe41927a07d75f5e1b852849326bfcd9b54b3da"}]}