)]}'
{"doc/source/event_notifications.rst":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"a21a8d42b1c5c8827ef929a1c53822469d7ae258","unresolved":false,"context_lines":[{"line_number":355,"context_line":"Example Notification - Expired Password"},{"line_number":356,"context_line":"---------------------------------------"},{"line_number":357,"context_line":""},{"line_number":358,"context_line":"The following is an example of a notification that is sent when a user\u0027s"},{"line_number":359,"context_line":"password has expired and needs to be reset. This example contains the reason"},{"line_number":360,"context_line":"object that is emitted for various PCI-DSS related events."},{"line_number":361,"context_line":""}],"source_content_type":"text/x-rst","patch_set":1,"id":"5a74a57a_cda51f05","line":358,"updated":"2016-11-23 20:26:15.000000000","message":"nit: when a user authenticates but their password has expired and needs to be reset.\n\nOnly suggesting this so that we clarify *when* the notification is sent (when the user authenticates and not the moment the password expires).","commit_id":"766478139389ee5a122be322fe4e15add8972a5e"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"82366e482c4660ddf3f63dd638b14c725e12cad7","unresolved":false,"context_lines":[{"line_number":112,"context_line":"* ``\u003caction\u003e``: The action being performed, typically:"},{"line_number":113,"context_line":"  ``\u003coperation\u003e``. ``\u003cresource_type\u003e``"},{"line_number":114,"context_line":""},{"line_number":115,"context_line":"There is also a specific ``\u003creason\u003e`` object that is present for the following"},{"line_number":116,"context_line":"PCI-DSS related events:"},{"line_number":117,"context_line":""},{"line_number":118,"context_line":"* ``PCI-DSS 8.1.6``: Limit repeated access attempts by locking out the user"},{"line_number":119,"context_line":"  after more than X failed attempts."}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a74a57a_5249395f","line":116,"range":{"start_line":115,"start_character":0,"end_line":116,"end_character":23},"updated":"2016-11-28 05:07:16.000000000","message":"a link back to the PCI doc would be cool. Something like:\n\n  For more information, see :doc:`security_compliance` for configuring PCI-DSS in keystone.","commit_id":"e6024ad1ce6c4b0491d903c91375f369bfb4e6a6"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"82366e482c4660ddf3f63dd638b14c725e12cad7","unresolved":false,"context_lines":[{"line_number":124,"context_line":""},{"line_number":125,"context_line":"The reason object will contain the following keys:"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"* ``\u003creasonType\u003e``: Description of the PCI-DSS event"},{"line_number":128,"context_line":"* ``\u003creasonCode\u003e``: HTTP response code for the event"},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"Additionally there may be extra keys present depending on the operation being"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a74a57a_d25469ff","line":127,"range":{"start_line":127,"start_character":2,"end_line":127,"end_character":18},"updated":"2016-11-28 05:07:16.000000000","message":"the \u003c\u003e convention was used above because they were not static, reasonType and Code are.\n\nwhat about re-using that sweet table you had in the spec?","commit_id":"e6024ad1ce6c4b0491d903c91375f369bfb4e6a6"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"ed3e84566509bbeb57345c0b5efdb73eb286ae9f","unresolved":false,"context_lines":[{"line_number":124,"context_line":""},{"line_number":125,"context_line":"The reason object will contain the following keys:"},{"line_number":126,"context_line":""},{"line_number":127,"context_line":"* ``\u003creasonType\u003e``: Description of the PCI-DSS event"},{"line_number":128,"context_line":"* ``\u003creasonCode\u003e``: HTTP response code for the event"},{"line_number":129,"context_line":""},{"line_number":130,"context_line":"Additionally there may be extra keys present depending on the operation being"}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a74a57a_12c6e199","line":127,"range":{"start_line":127,"start_character":2,"end_line":127,"end_character":18},"in_reply_to":"5a74a57a_d25469ff","updated":"2016-11-28 05:16:12.000000000","message":"good idea!","commit_id":"e6024ad1ce6c4b0491d903c91375f369bfb4e6a6"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"82366e482c4660ddf3f63dd638b14c725e12cad7","unresolved":false,"context_lines":[{"line_number":364,"context_line":".. code-block:: javascript"},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"   {"},{"line_number":367,"context_line":"\t\"priority\": \"INFO\","},{"line_number":368,"context_line":"\t\"_unique_id\": \"222441bdc958423d8af6f28f9c558614\","},{"line_number":369,"context_line":"\t\"event_type\": \"identity.authenticate\","},{"line_number":370,"context_line":"\t\"timestamp\": \"2016-11-11 18:31:11.290821\","}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a74a57a_32391dd8","line":367,"range":{"start_line":367,"start_character":0,"end_line":367,"end_character":1},"updated":"2016-11-28 05:07:16.000000000","message":"use spaces, not tabs","commit_id":"e6024ad1ce6c4b0491d903c91375f369bfb4e6a6"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"ed3e84566509bbeb57345c0b5efdb73eb286ae9f","unresolved":false,"context_lines":[{"line_number":364,"context_line":".. code-block:: javascript"},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"   {"},{"line_number":367,"context_line":"\t\"priority\": \"INFO\","},{"line_number":368,"context_line":"\t\"_unique_id\": \"222441bdc958423d8af6f28f9c558614\","},{"line_number":369,"context_line":"\t\"event_type\": \"identity.authenticate\","},{"line_number":370,"context_line":"\t\"timestamp\": \"2016-11-11 18:31:11.290821\","}],"source_content_type":"text/x-rst","patch_set":2,"id":"5a74a57a_32c3dd8a","line":367,"range":{"start_line":367,"start_character":0,"end_line":367,"end_character":1},"in_reply_to":"5a74a57a_32391dd8","updated":"2016-11-28 05:16:12.000000000","message":"whoops, will fix","commit_id":"e6024ad1ce6c4b0491d903c91375f369bfb4e6a6"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"79478982b3a1b1c1312351d1b75fb026e5289d43","unresolved":false,"context_lines":[{"line_number":372,"context_line":"---------------------------------------"},{"line_number":373,"context_line":""},{"line_number":374,"context_line":"The following is an example of a notification that is sent when a user"},{"line_number":375,"context_line":"attempts to authenticate but their password has expired and needs to be reset."},{"line_number":376,"context_line":""},{"line_number":377,"context_line":"In this example, the ``payload`` contains a ``reason`` portion which contains"},{"line_number":378,"context_line":"both a ``reasonCode`` and ``reasonType``."}],"source_content_type":"text/x-rst","patch_set":4,"id":"5a74a57a_55f2d606","line":375,"updated":"2016-11-28 21:49:15.000000000","message":"nit: s/and needs to be reset//\n\nOnly because the information about resetting the password doesn\u0027t necessarily help a reader understand the reason for the notification. The only thing they should really be concerned about is that a specific notification was sent because a password expired. Other information detailing a fix is better left for the PCI documentation or in the reason itself (which is done at line 409 already).","commit_id":"2d61c9ab3e33ce0696e05cb958225f3117e306ca"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"749b6457f41b3c64594a9c91648a281338580b56","unresolved":false,"context_lines":[{"line_number":372,"context_line":"---------------------------------------"},{"line_number":373,"context_line":""},{"line_number":374,"context_line":"The following is an example of a notification that is sent when a user"},{"line_number":375,"context_line":"attempts to authenticate but their password has expired and needs to be reset."},{"line_number":376,"context_line":""},{"line_number":377,"context_line":"In this example, the ``payload`` contains a ``reason`` portion which contains"},{"line_number":378,"context_line":"both a ``reasonCode`` and ``reasonType``."}],"source_content_type":"text/x-rst","patch_set":4,"id":"5a74a57a_b4b4d9d4","line":375,"in_reply_to":"5a74a57a_55f2d606","updated":"2016-11-29 18:59:39.000000000","message":"good point!","commit_id":"2d61c9ab3e33ce0696e05cb958225f3117e306ca"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"4d7734f0e10a4747518b3e705b84912591795e14","unresolved":false,"context_lines":[{"line_number":129,"context_line":"There is a specific ``reason`` object that will be present for the following"},{"line_number":130,"context_line":"PCI-DSS related events:"},{"line_number":131,"context_line":""},{"line_number":132,"context_line":".. list-table::"},{"line_number":133,"context_line":"   :widths: 45 250"},{"line_number":134,"context_line":"   :header-rows: 1"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"   * - Section"},{"line_number":137,"context_line":"     - PCI-DSS Description"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a71b18c_6538e6d3","line":134,"range":{"start_line":132,"start_character":0,"end_line":134,"end_character":18},"updated":"2016-12-07 05:00:38.000000000","message":"why not create the table like on line 162?","commit_id":"4c31e752b758cca42f69ea36cc59b04556e64a8d"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"12a82b5892e4b3ee6a2fa55042dcca1d482b8323","unresolved":false,"context_lines":[{"line_number":129,"context_line":"There is a specific ``reason`` object that will be present for the following"},{"line_number":130,"context_line":"PCI-DSS related events:"},{"line_number":131,"context_line":""},{"line_number":132,"context_line":".. list-table::"},{"line_number":133,"context_line":"   :widths: 45 250"},{"line_number":134,"context_line":"   :header-rows: 1"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"   * - Section"},{"line_number":137,"context_line":"     - PCI-DSS Description"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a71b18c_e84f6d8f","line":134,"range":{"start_line":132,"start_character":0,"end_line":134,"end_character":18},"in_reply_to":"3a71b18c_6538e6d3","updated":"2016-12-07 06:16:23.000000000","message":"This looks like it renders the same as the 162 table, I can change the 162 table to match","commit_id":"4c31e752b758cca42f69ea36cc59b04556e64a8d"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"b69389a5831b2ba5ec6c57435baef287eac7d297","unresolved":false,"context_lines":[{"line_number":129,"context_line":"There is a specific ``reason`` object that will be present for the following"},{"line_number":130,"context_line":"PCI-DSS related events:"},{"line_number":131,"context_line":""},{"line_number":132,"context_line":".. list-table::"},{"line_number":133,"context_line":"   :widths: 45 250"},{"line_number":134,"context_line":"   :header-rows: 1"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"   * - Section"},{"line_number":137,"context_line":"     - PCI-DSS Description"}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a71b18c_b2e69342","line":134,"range":{"start_line":132,"start_character":0,"end_line":134,"end_character":18},"in_reply_to":"3a71b18c_e84f6d8f","updated":"2016-12-07 22:48:18.000000000","message":"ha, i meant for you to match this table up with the other two.","commit_id":"4c31e752b758cca42f69ea36cc59b04556e64a8d"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"4d7734f0e10a4747518b3e705b84912591795e14","unresolved":false,"context_lines":[{"line_number":133,"context_line":"   :widths: 45 250"},{"line_number":134,"context_line":"   :header-rows: 1"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"   * - Section"},{"line_number":137,"context_line":"     - PCI-DSS Description"},{"line_number":138,"context_line":"   * - 8.1.6"},{"line_number":139,"context_line":"     - Limit repeated access attempts by locking out the user after more than X failed attempts."},{"line_number":140,"context_line":"   * - 8.2.3"},{"line_number":141,"context_line":"     - Passwords must meet the established criteria."},{"line_number":142,"context_line":"   * - 8.2.4"},{"line_number":143,"context_line":"     - Password must be changed every X days."},{"line_number":144,"context_line":"   * - 8.2.5"},{"line_number":145,"context_line":"     - Do not let users reuse the last X passwords."},{"line_number":146,"context_line":"   * - Other"},{"line_number":147,"context_line":"     - Prevent passwords from being changed for a minimum of X days."},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"The reason object will contain the following keys:"},{"line_number":150,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a71b18c_a52e7e89","line":147,"range":{"start_line":136,"start_character":0,"end_line":147,"end_character":68},"updated":"2016-12-07 05:00:38.000000000","message":"-1 for not including the reasonCode in the table, that would make it much easier for a user to look up what happened.\n\ni\u0027m wondering if we want to put the reasonType instead of the PCI description, thoughts?\n\nI like the reference back to the PCI section though.","commit_id":"4c31e752b758cca42f69ea36cc59b04556e64a8d"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"12a82b5892e4b3ee6a2fa55042dcca1d482b8323","unresolved":false,"context_lines":[{"line_number":133,"context_line":"   :widths: 45 250"},{"line_number":134,"context_line":"   :header-rows: 1"},{"line_number":135,"context_line":""},{"line_number":136,"context_line":"   * - Section"},{"line_number":137,"context_line":"     - PCI-DSS Description"},{"line_number":138,"context_line":"   * - 8.1.6"},{"line_number":139,"context_line":"     - Limit repeated access attempts by locking out the user after more than X failed attempts."},{"line_number":140,"context_line":"   * - 8.2.3"},{"line_number":141,"context_line":"     - Passwords must meet the established criteria."},{"line_number":142,"context_line":"   * - 8.2.4"},{"line_number":143,"context_line":"     - Password must be changed every X days."},{"line_number":144,"context_line":"   * - 8.2.5"},{"line_number":145,"context_line":"     - Do not let users reuse the last X passwords."},{"line_number":146,"context_line":"   * - Other"},{"line_number":147,"context_line":"     - Prevent passwords from being changed for a minimum of X days."},{"line_number":148,"context_line":""},{"line_number":149,"context_line":"The reason object will contain the following keys:"},{"line_number":150,"context_line":""}],"source_content_type":"text/x-rst","patch_set":5,"id":"3a71b18c_e8c12de5","line":147,"range":{"start_line":136,"start_character":0,"end_line":147,"end_character":68},"in_reply_to":"3a71b18c_a52e7e89","updated":"2016-12-07 06:16:23.000000000","message":"Will do! Also I think reasonType would probably be clearer than description in terms of a user looking up what it means.","commit_id":"4c31e752b758cca42f69ea36cc59b04556e64a8d"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"f96f6081bd61ea2be856490dcd0bb5da13dbbb00","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. note::"},{"line_number":116,"context_line":"   The ``eventType`` property of the CADF payload is different from the"},{"line_number":117,"context_line":"   ``event_type`` property of a notifications. The former (``eventType``) is a"},{"line_number":118,"context_line":"   CADF keyword which designates the type of event that is being measured, this"},{"line_number":119,"context_line":"   can be: `activity`, `monitor` or `control`. Whereas the latter"},{"line_number":120,"context_line":"   (``event_type``) is described in previous sections as:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"3a71b18c_6025e9ac","line":117,"range":{"start_line":117,"start_character":30,"end_line":117,"end_character":32},"updated":"2016-12-08 14:20:03.000000000","message":"remove \"a\"","commit_id":"e235bb14fd25937e1c5637bb19b094c0e08dd225"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"e8a7d7a18e96a1bf6601b41da986d2c78615c5f2","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. note::"},{"line_number":116,"context_line":"   The ``eventType`` property of the CADF payload is different from the"},{"line_number":117,"context_line":"   ``event_type`` property of a notifications. The former (``eventType``) is a"},{"line_number":118,"context_line":"   CADF keyword which designates the type of event that is being measured, this"},{"line_number":119,"context_line":"   can be: `activity`, `monitor` or `control`. Whereas the latter"},{"line_number":120,"context_line":"   (``event_type``) is described in previous sections as:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"da4df55a_3179d030","line":117,"in_reply_to":"1a6eadb0_954ec994","updated":"2016-12-21 19:29:37.000000000","message":"Done","commit_id":"e235bb14fd25937e1c5637bb19b094c0e08dd225"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"0e13edcd4d063967198ec1417c23bd7cec930214","unresolved":false,"context_lines":[{"line_number":114,"context_line":""},{"line_number":115,"context_line":".. note::"},{"line_number":116,"context_line":"   The ``eventType`` property of the CADF payload is different from the"},{"line_number":117,"context_line":"   ``event_type`` property of a notifications. The former (``eventType``) is a"},{"line_number":118,"context_line":"   CADF keyword which designates the type of event that is being measured, this"},{"line_number":119,"context_line":"   can be: `activity`, `monitor` or `control`. Whereas the latter"},{"line_number":120,"context_line":"   (``event_type``) is described in previous sections as:"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1a6eadb0_954ec994","line":117,"in_reply_to":"3a71b18c_6025e9ac","updated":"2016-12-19 20:00:00.000000000","message":"++ agreed. Or we can make \"notifications\" singular and keep \"a\", which I don\u0027t necessarily mind because we reference the \"CADF payload\" in a singular sense. Either way is fine with me though - let\u0027s do this in another patch.","commit_id":"e235bb14fd25937e1c5637bb19b094c0e08dd225"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"0e13edcd4d063967198ec1417c23bd7cec930214","unresolved":false,"context_lines":[{"line_number":189,"context_line":"     - data/security/account/user"},{"line_number":190,"context_line":"   * - trust"},{"line_number":191,"context_line":"     - create,delete"},{"line_number":192,"context_line":"     - data/security/truse"},{"line_number":193,"context_line":"   * - region"},{"line_number":194,"context_line":"     - create,update,delete"},{"line_number":195,"context_line":"     - data/security/region"}],"source_content_type":"text/x-rst","patch_set":6,"id":"1a6eadb0_0810e04d","line":192,"updated":"2016-12-19 20:00:00.000000000","message":"trust* instead of truse?","commit_id":"e235bb14fd25937e1c5637bb19b094c0e08dd225"}]}