)]}'
{"api-ref/source/v3-ext/parameters.yaml":[{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":118,"context_line":""},{"line_number":119,"context_line":"       CCYY-MM-DDThh:mm:ss±hh:mm"},{"line_number":120,"context_line":""},{"line_number":121,"context_line":"    The ``±hh:mm`` value, if included, is the time zone as an offset"},{"line_number":122,"context_line":"    from UTC."},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"    For example, ``2015-08-27T09:49:58-05:00``."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1aa78d24_de2d1b47","line":121,"range":{"start_line":121,"start_character":46,"end_line":121,"end_character":55},"updated":"2016-07-13 15:33:22.000000000","message":"The time zone should always be UTC.","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":121,"context_line":"    The ``±hh:mm`` value, if included, is the time zone as an offset"},{"line_number":122,"context_line":"    from UTC."},{"line_number":123,"context_line":""},{"line_number":124,"context_line":"    For example, ``2015-08-27T09:49:58-05:00``."},{"line_number":125,"context_line":""},{"line_number":126,"context_line":"    If the Identity API does not include this attribute or its value is"},{"line_number":127,"context_line":"    ``null``, the token never expires."}],"source_content_type":"text/x-yaml","patch_set":1,"id":"1aa78d24_be3bef9a","line":124,"range":{"start_line":124,"start_character":17,"end_line":124,"end_character":47},"updated":"2016-07-13 15:33:22.000000000","message":"This format doesn\u0027t match what actually gets returned:\n\"2015-11-07T02:58:43.578887Z\"","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":88,"context_line":"    If set to `true` then a trust between a ``trustor`` and any third-party"},{"line_number":89,"context_line":"    user may be issued by the ``trustee`` just like a regular trust."},{"line_number":90,"context_line":"    If set to `false`, stops further redelegation. `false` by default,"},{"line_number":91,"context_line":"    not stored in the trust."},{"line_number":92,"context_line":"  in: body"},{"line_number":93,"context_line":"  required: false"},{"line_number":94,"context_line":"  type: boolean"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_bc001202","line":91,"updated":"2016-07-13 16:58:39.000000000","message":"This says not stored in the trust but it is also `in: body`. Maybe we should elaborate on the \u0027not stored in the trust.\u0027 part.","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":88,"context_line":"    If set to `true` then a trust between a ``trustor`` and any third-party"},{"line_number":89,"context_line":"    user may be issued by the ``trustee`` just like a regular trust."},{"line_number":90,"context_line":"    If set to `false`, stops further redelegation. `false` by default,"},{"line_number":91,"context_line":"    not stored in the trust."},{"line_number":92,"context_line":"  in: body"},{"line_number":93,"context_line":"  required: false"},{"line_number":94,"context_line":"  type: boolean"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_fc41fa63","line":91,"in_reply_to":"1aa78d24_bc001202","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":235,"context_line":"redelegated_trust_id:"},{"line_number":236,"context_line":"  description: |"},{"line_number":237,"context_line":"    Returned with redelegated trust provides information about the predecessor"},{"line_number":238,"context_line":"    in the trust chain. Specifying this field in a trust manipulation request"},{"line_number":239,"context_line":"    has no effect."},{"line_number":240,"context_line":"  in: body"},{"line_number":241,"context_line":"  required: false"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_7c1b4a73","line":238,"updated":"2016-07-13 16:58:39.000000000","message":"trust manipulation? Trusts are immutable.","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":235,"context_line":"redelegated_trust_id:"},{"line_number":236,"context_line":"  description: |"},{"line_number":237,"context_line":"    Returned with redelegated trust provides information about the predecessor"},{"line_number":238,"context_line":"    in the trust chain. Specifying this field in a trust manipulation request"},{"line_number":239,"context_line":"    has no effect."},{"line_number":240,"context_line":"  in: body"},{"line_number":241,"context_line":"  required: false"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_fc38daef","line":238,"in_reply_to":"1aa78d24_7c1b4a73","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":242,"context_line":"  type: string"},{"line_number":243,"context_line":"redelegation_count:"},{"line_number":244,"context_line":"  description: |"},{"line_number":245,"context_line":"    Specifies the maximum remaining depth of the redelegated trust chain."},{"line_number":246,"context_line":"    Each subsequent trust has this field decremented by 1 automatically."},{"line_number":247,"context_line":"    The initial ``trustor`` issuing new trust that can be redelegated, must"},{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_3c6a62b3","line":245,"updated":"2016-07-13 16:58:39.000000000","message":"Do we describe the `chain` anywhere, or how to create the chain? Maybe we should include that a trust chain is a trust created using a trust scoped token.","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":242,"context_line":"  type: string"},{"line_number":243,"context_line":"redelegation_count:"},{"line_number":244,"context_line":"  description: |"},{"line_number":245,"context_line":"    Specifies the maximum remaining depth of the redelegated trust chain."},{"line_number":246,"context_line":"    Each subsequent trust has this field decremented by 1 automatically."},{"line_number":247,"context_line":"    The initial ``trustor`` issuing new trust that can be redelegated, must"},{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_972a517c","line":245,"in_reply_to":"1aa78d24_3c6a62b3","updated":"2016-07-13 17:09:03.000000000","message":"added that in trust.inc","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":243,"context_line":"redelegation_count:"},{"line_number":244,"context_line":"  description: |"},{"line_number":245,"context_line":"    Specifies the maximum remaining depth of the redelegated trust chain."},{"line_number":246,"context_line":"    Each subsequent trust has this field decremented by 1 automatically."},{"line_number":247,"context_line":"    The initial ``trustor`` issuing new trust that can be redelegated, must"},{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"},{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_bc5f72e3","line":246,"updated":"2016-07-13 16:58:39.000000000","message":"`1` to be consistent with line 261?","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":243,"context_line":"redelegation_count:"},{"line_number":244,"context_line":"  description: |"},{"line_number":245,"context_line":"    Specifies the maximum remaining depth of the redelegated trust chain."},{"line_number":246,"context_line":"    Each subsequent trust has this field decremented by 1 automatically."},{"line_number":247,"context_line":"    The initial ``trustor`` issuing new trust that can be redelegated, must"},{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"},{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_d720599c","line":246,"in_reply_to":"1aa78d24_bc5f72e3","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"},{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"},{"line_number":250,"context_line":"    configuration parameter in order to limit the possible length of derivated"},{"line_number":251,"context_line":"    trust chains. The trust issued by the trustor using a regular token"},{"line_number":252,"context_line":"    (not redelegating), in which allow_redelegation is set to `true` (the new"},{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_9cd43647","line":251,"updated":"2016-07-13 16:58:39.000000000","message":"nit: s/regular/project-scoped/ or something more specific.","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":248,"context_line":"    set ``allow_redelegation`` to `true` and may set ``redelegation_count``"},{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"},{"line_number":250,"context_line":"    configuration parameter in order to limit the possible length of derivated"},{"line_number":251,"context_line":"    trust chains. The trust issued by the trustor using a regular token"},{"line_number":252,"context_line":"    (not redelegating), in which allow_redelegation is set to `true` (the new"},{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_f76bd5b6","line":251,"in_reply_to":"1aa78d24_9cd43647","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"},{"line_number":250,"context_line":"    configuration parameter in order to limit the possible length of derivated"},{"line_number":251,"context_line":"    trust chains. The trust issued by the trustor using a regular token"},{"line_number":252,"context_line":"    (not redelegating), in which allow_redelegation is set to `true` (the new"},{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"},{"line_number":255,"context_line":"    is not set or set to `null`. If ``allow_redelegation`` is set to `false`"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_3cc6e299","line":252,"updated":"2016-07-13 16:58:39.000000000","message":"``allow_redelegation``*","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":249,"context_line":"    to an integer value less than or equal to ``max_redelegation_count``"},{"line_number":250,"context_line":"    configuration parameter in order to limit the possible length of derivated"},{"line_number":251,"context_line":"    trust chains. The trust issued by the trustor using a regular token"},{"line_number":252,"context_line":"    (not redelegating), in which allow_redelegation is set to `true` (the new"},{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"},{"line_number":255,"context_line":"    is not set or set to `null`. If ``allow_redelegation`` is set to `false`"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_1765c1df","line":252,"in_reply_to":"1aa78d24_3cc6e299","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"},{"line_number":255,"context_line":"    is not set or set to `null`. If ``allow_redelegation`` is set to `false`"},{"line_number":256,"context_line":"    then ``redelegation_count`` will be set to `0` in the trust on the server side."},{"line_number":257,"context_line":""},{"line_number":258,"context_line":"    If the trust is being issued by the ``trustee`` of a redelegatable trust-scoped"},{"line_number":259,"context_line":"    token (redelegation case) then ``redelegation_count`` should not be set, as it"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_dc419e0b","line":256,"updated":"2016-07-13 16:58:39.000000000","message":"nit: s/on the server side.//","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":253,"context_line":"    trust is redelegatable), will be populated with the value specified in the"},{"line_number":254,"context_line":"    ``max_redelegation_count`` configuration parameter if ``redelegation_count``"},{"line_number":255,"context_line":"    is not set or set to `null`. If ``allow_redelegation`` is set to `false`"},{"line_number":256,"context_line":"    then ``redelegation_count`` will be set to `0` in the trust on the server side."},{"line_number":257,"context_line":""},{"line_number":258,"context_line":"    If the trust is being issued by the ``trustee`` of a redelegatable trust-scoped"},{"line_number":259,"context_line":"    token (redelegation case) then ``redelegation_count`` should not be set, as it"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_f7a2b5fa","line":256,"in_reply_to":"1aa78d24_dc419e0b","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":275,"context_line":"  description: |"},{"line_number":276,"context_line":"    Specifies how many times the trust can be used to obtain a token. This value"},{"line_number":277,"context_line":"    is decreased each time a token is issued through the trust. Once it reaches"},{"line_number":278,"context_line":"    0, no further tokens will be issued through the trust. The default value is"},{"line_number":279,"context_line":"    null, meaning there is no limit on the number of tokens issued through the"},{"line_number":280,"context_line":"    trust. If redelegation is enabled it must not be set."},{"line_number":281,"context_line":"  in: body"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_bc0652cb","line":278,"updated":"2016-07-13 16:58:39.000000000","message":"`0` to be consistent with line 261?","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":275,"context_line":"  description: |"},{"line_number":276,"context_line":"    Specifies how many times the trust can be used to obtain a token. This value"},{"line_number":277,"context_line":"    is decreased each time a token is issued through the trust. Once it reaches"},{"line_number":278,"context_line":"    0, no further tokens will be issued through the trust. The default value is"},{"line_number":279,"context_line":"    null, meaning there is no limit on the number of tokens issued through the"},{"line_number":280,"context_line":"    trust. If redelegation is enabled it must not be set."},{"line_number":281,"context_line":"  in: body"}],"source_content_type":"text/x-yaml","patch_set":5,"id":"1aa78d24_77b7e539","line":278,"in_reply_to":"1aa78d24_bc0652cb","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"}],"api-ref/source/v3-ext/samples/OS-TRUST/trust-get-response.json":[{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":1,"context_line":"{"},{"line_number":2,"context_line":"    \"trust\": {"},{"line_number":3,"context_line":"        \"id\": \"987fe8\","},{"line_number":4,"context_line":"        \"expires_at\": \"2013-02-27T18:30:59.999999Z\","},{"line_number":5,"context_line":"        \"impersonation\": true,"},{"line_number":6,"context_line":"        \"links\": {"},{"line_number":7,"context_line":"            \"self\": \"http://identity:35357/v3/OS-TRUST/trusts/987fe8\""}],"source_content_type":"application/json","patch_set":1,"id":"1aa78d24_feabb785","line":4,"range":{"start_line":4,"start_character":23,"end_line":4,"end_character":50},"updated":"2016-07-13 15:33:22.000000000","message":"Doesn\u0027t match format defined in parameters.yaml","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":23,"context_line":"        \"project_id\": \"0f1233\","},{"line_number":24,"context_line":"        \"trustee_user_id\": \"be34d1\","},{"line_number":25,"context_line":"        \"trustor_user_id\": \"56ae32\""},{"line_number":26,"context_line":"    }"},{"line_number":27,"context_line":"}"}],"source_content_type":"application/json","patch_set":1,"id":"1aa78d24_be35aff7","line":26,"range":{"start_line":26,"start_character":4,"end_line":26,"end_character":5},"updated":"2016-07-13 15:33:22.000000000","message":"remaining_uses?","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"}],"api-ref/source/v3-ext/trust.inc":[{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":37,"context_line":".. rest_parameters:: parameters.yaml"},{"line_number":38,"context_line":""},{"line_number":39,"context_line":"   - impersonation: impersonation"},{"line_number":40,"context_line":"   - trust: trust"},{"line_number":41,"context_line":"   - trustor_user_id: trustor_user_id"},{"line_number":42,"context_line":"   - name: name"},{"line_number":43,"context_line":"   - roles: roles"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1aa78d24_72bd3bb0","line":40,"range":{"start_line":40,"start_character":5,"end_line":40,"end_character":10},"updated":"2016-07-13 15:33:22.000000000","message":"trust is not really a parameter, right?","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":61,"context_line":""},{"line_number":62,"context_line":"   - id: id"},{"line_number":63,"context_line":"   - impersonation: impersonation"},{"line_number":64,"context_line":"   - roles_links: roles_links"},{"line_number":65,"context_line":"   - trust: trust"},{"line_number":66,"context_line":"   - trustor_user_id: trustor_user_id"},{"line_number":67,"context_line":"   - name: name"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1aa78d24_f25acb80","line":64,"range":{"start_line":64,"start_character":5,"end_line":64,"end_character":16},"updated":"2016-07-13 15:33:22.000000000","message":"roles_links? Don\u0027t see this in the docs","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":117,"context_line":"   - impersonation: impersonation"},{"line_number":118,"context_line":"   - links: links"},{"line_number":119,"context_line":"   - roles: roles"},{"line_number":120,"context_line":"   - roles_links: roles_links"},{"line_number":121,"context_line":"   - name: name"},{"line_number":122,"context_line":"   - project_id: project_id"},{"line_number":123,"context_line":"   - trustee_user_id: trustee_user_id"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1aa78d24_728c1bd7","line":120,"range":{"start_line":120,"start_character":0,"end_line":120,"end_character":29},"updated":"2016-07-13 15:33:22.000000000","message":"same as above","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":162,"context_line":"   - impersonation: impersonation"},{"line_number":163,"context_line":"   - links: links"},{"line_number":164,"context_line":"   - roles: roles"},{"line_number":165,"context_line":"   - roles_links: roles_links"},{"line_number":166,"context_line":"   - name: name"},{"line_number":167,"context_line":"   - project_id: project_id"},{"line_number":168,"context_line":"   - trustee_user_id: trustee_user_id"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1aa78d24_126b17f2","line":165,"range":{"start_line":165,"start_character":5,"end_line":165,"end_character":16},"updated":"2016-07-13 15:33:22.000000000","message":"same as above","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":18338,"name":"Ron De Rose","email":"ronald.de.rose@intel.com","username":"derosenet"},"change_message_id":"02a9730e095c9199b448faf11009ed3e191e423d","unresolved":false,"context_lines":[{"line_number":163,"context_line":"   - links: links"},{"line_number":164,"context_line":"   - roles: roles"},{"line_number":165,"context_line":"   - roles_links: roles_links"},{"line_number":166,"context_line":"   - name: name"},{"line_number":167,"context_line":"   - project_id: project_id"},{"line_number":168,"context_line":"   - trustee_user_id: trustee_user_id"},{"line_number":169,"context_line":"   - trustor_user_id: trustor_user_id"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1aa78d24_520e3f3b","line":166,"range":{"start_line":166,"start_character":5,"end_line":166,"end_character":9},"updated":"2016-07-13 15:33:22.000000000","message":"is this the user name or role name?","commit_id":"b8a4f8768f4b55af4251ecbe9b69a4f251224a7f"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":16,"context_line":"roles to another user (the trustee), and optionally allow the trustee"},{"line_number":17,"context_line":"to impersonate the trustor. After the trustor has created a trust, the"},{"line_number":18,"context_line":"trustee can specify the trust’s id attribute as part of an authentication"},{"line_number":19,"context_line":"request to then create a token representing the delegated authority."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"The trust contains constraints on the delegated attributes. A token created"},{"line_number":22,"context_line":"based on a trust will convey a subset of the trustor’s roles on the specified"}],"source_content_type":"text/x-c++src","patch_set":5,"id":"1aa78d24_fc961a3c","line":19,"updated":"2016-07-13 16:58:39.000000000","message":"nit: representing the delegated authority of the trustor.","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":16,"context_line":"roles to another user (the trustee), and optionally allow the trustee"},{"line_number":17,"context_line":"to impersonate the trustor. After the trustor has created a trust, the"},{"line_number":18,"context_line":"trustee can specify the trust’s id attribute as part of an authentication"},{"line_number":19,"context_line":"request to then create a token representing the delegated authority."},{"line_number":20,"context_line":""},{"line_number":21,"context_line":"The trust contains constraints on the delegated attributes. A token created"},{"line_number":22,"context_line":"based on a trust will convey a subset of the trustor’s roles on the specified"}],"source_content_type":"text/x-c++src","patch_set":5,"id":"1aa78d24_57e0e925","line":19,"in_reply_to":"1aa78d24_fc961a3c","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":33,"context_line":"In other words, there is no way of implicitly delegating all roles to a trustee, in"},{"line_number":34,"context_line":"order to prevent users accidentally creating trust that are much more broad in scope"},{"line_number":35,"context_line":"than intended. A trust without a ``project_id`` or any delegated roles is unscoped,"},{"line_number":36,"context_line":"and therefore does not represent authorization on a specific resource."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Trusts are immutable. If the trustee wishes to modify the attributes of the trust,"},{"line_number":39,"context_line":"they should create a new trust and delete the old trust. If a trust is deleted, any"}],"source_content_type":"text/x-c++src","patch_set":5,"id":"1aa78d24_bcde520e","line":36,"updated":"2016-07-13 16:58:39.000000000","message":"The only resource we allow trusts to work on are projects, right?","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"d44d1fba3bbe7649cf8737bf8e3ed503f458084d","unresolved":false,"context_lines":[{"line_number":35,"context_line":"than intended. A trust without a ``project_id`` or any delegated roles is unscoped,"},{"line_number":36,"context_line":"and therefore does not represent authorization on a specific resource."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Trusts are immutable. If the trustee wishes to modify the attributes of the trust,"},{"line_number":39,"context_line":"they should create a new trust and delete the old trust. If a trust is deleted, any"},{"line_number":40,"context_line":"tokens generated based on the trust are immediately revoked."},{"line_number":41,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":5,"id":"1aa78d24_bc05b27a","line":38,"updated":"2016-07-13 16:58:39.000000000","message":"s/the trustee/a user/ ?","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"ccf7128395cd99cccdf30a0b4515406e55d25f42","unresolved":false,"context_lines":[{"line_number":35,"context_line":"than intended. A trust without a ``project_id`` or any delegated roles is unscoped,"},{"line_number":36,"context_line":"and therefore does not represent authorization on a specific resource."},{"line_number":37,"context_line":""},{"line_number":38,"context_line":"Trusts are immutable. If the trustee wishes to modify the attributes of the trust,"},{"line_number":39,"context_line":"they should create a new trust and delete the old trust. If a trust is deleted, any"},{"line_number":40,"context_line":"tokens generated based on the trust are immediately revoked."},{"line_number":41,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":5,"id":"1aa78d24_976251ab","line":38,"in_reply_to":"1aa78d24_bc05b27a","updated":"2016-07-13 17:09:03.000000000","message":"Done","commit_id":"d35388ffe3a2576d3fde12db55b5bb488663ee42"}]}