)]}'
{"api-ref/source/v3/authenticate-v3.inc":[{"author":{"_account_id":22604,"name":"Samuel Pilla","email":"sp516w@att.com","username":"samuel.pilla"},"change_message_id":"11bfe935104ee0fcac34865386ca5065eddd272c","unresolved":false,"context_lines":[{"line_number":160,"context_line":"``password`` authentication method, the credentials, and the"},{"line_number":161,"context_line":"``project`` or ``domain`` authorization scope."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"A pair of configuration options have been added to the ``[resource]``"},{"line_number":164,"context_line":"section to specify a special ``admin`` project:"},{"line_number":165,"context_line":"``admin_project_domain_name`` and ``admin_project_name``.  If these are"},{"line_number":166,"context_line":"defined, any scoped token issued for that project will have an additional"},{"line_number":167,"context_line":"identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":168,"context_line":"This identifier can then be checked by the policy rules in the policy files"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1a6eadb0_eb674c23","line":165,"range":{"start_line":163,"start_character":0,"end_line":165,"end_character":57},"updated":"2016-12-12 19:50:28.000000000","message":"This is slightly confusing to connect that the pair of conifguration options are ``admin_project_domain_name`` and ``admin_project_name`` since they are sperated by all the details.\n\nI feel this needs to be moved around/re-worded for clarity, maybe something like:\n\"A pair of configuration options, ``admin_project_domain_name`` and ``admin_project_name``,  have been added to the ``[resource]`` section to specify a special ``admin`` project.\"","commit_id":"14bf2889e0f0fecc3a54eca66426b21cb4221203"},{"author":{"_account_id":17645,"name":"Shan Guo","email":"guoshan.jolie@gmail.com","username":"guoshan"},"change_message_id":"c54e491382e556b7dbdbdf301f8dbacd36da98ea","unresolved":false,"context_lines":[{"line_number":160,"context_line":"``password`` authentication method, the credentials, and the"},{"line_number":161,"context_line":"``project`` or ``domain`` authorization scope."},{"line_number":162,"context_line":""},{"line_number":163,"context_line":"A pair of configuration options have been added to the ``[resource]``"},{"line_number":164,"context_line":"section to specify a special ``admin`` project:"},{"line_number":165,"context_line":"``admin_project_domain_name`` and ``admin_project_name``.  If these are"},{"line_number":166,"context_line":"defined, any scoped token issued for that project will have an additional"},{"line_number":167,"context_line":"identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":168,"context_line":"This identifier can then be checked by the policy rules in the policy files"}],"source_content_type":"text/x-c++src","patch_set":1,"id":"1a6eadb0_04ff0d02","line":165,"range":{"start_line":163,"start_character":0,"end_line":165,"end_character":57},"in_reply_to":"1a6eadb0_eb674c23","updated":"2016-12-13 02:57:59.000000000","message":"Done","commit_id":"14bf2889e0f0fecc3a54eca66426b21cb4221203"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"4dfc915e55a8d214277095f882e1b556690b28c3","unresolved":false,"context_lines":[{"line_number":166,"context_line":"If these are defined, any scoped token issued for that project"},{"line_number":167,"context_line":"will have an additional identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":168,"context_line":"This identifier can then be checked by the policy rules in the policy files"},{"line_number":169,"context_line":"of the services when evaluating access control policy for an API."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"Normal response codes: 201"},{"line_number":172,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"1a6eadb0_23f6a48f","line":169,"updated":"2016-12-13 14:30:19.000000000","message":"I don\u0027t think this is the best place for this doc.\n\nThere is also a section called \"Token authentication with scoped authorization\" and this also applies there. I don\u0027t think we should replicate this info there either.\n\nWe should create a new section \"Authentication with scoped authorization to the admin project\" and put all the details there. Another option would be to add these information to the projects docs.","commit_id":"9583eb13642cc5eed153e8e46680b8a053797f1f"},{"author":{"_account_id":21420,"name":"Gage Hugo","email":"gagehugo@gmail.com","username":"ghugo"},"change_message_id":"7a3c1136540048ea2bc4c600c782c24cb5970a09","unresolved":false,"context_lines":[{"line_number":166,"context_line":"If these are defined, any scoped token issued for that project"},{"line_number":167,"context_line":"will have an additional identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":168,"context_line":"This identifier can then be checked by the policy rules in the policy files"},{"line_number":169,"context_line":"of the services when evaluating access control policy for an API."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"Normal response codes: 201"},{"line_number":172,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"1a6eadb0_e24c53ca","line":169,"in_reply_to":"1a6eadb0_163f08d7","updated":"2016-12-14 23:19:30.000000000","message":"Agree with Samuel, this info will either need to be copied into \"Token authentication with scoped authorization\" or probably better off in its own section. Another possible idea could be to put this info as an optional response parameter for both sections, then you could include this info there without the duplication here.","commit_id":"9583eb13642cc5eed153e8e46680b8a053797f1f"},{"author":{"_account_id":17645,"name":"Shan Guo","email":"guoshan.jolie@gmail.com","username":"guoshan"},"change_message_id":"cebae5310caf7abaee5a994c0225c502b8661ca2","unresolved":false,"context_lines":[{"line_number":166,"context_line":"If these are defined, any scoped token issued for that project"},{"line_number":167,"context_line":"will have an additional identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":168,"context_line":"This identifier can then be checked by the policy rules in the policy files"},{"line_number":169,"context_line":"of the services when evaluating access control policy for an API."},{"line_number":170,"context_line":""},{"line_number":171,"context_line":"Normal response codes: 201"},{"line_number":172,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":2,"id":"1a6eadb0_163f08d7","line":169,"in_reply_to":"1a6eadb0_23f6a48f","updated":"2016-12-14 02:37:14.000000000","message":"Hi, Samuel, I\u0027m just putting this paragraph in the section \"Token authentication with scoped authorization\". And I think its the only section apply this situation, pls review it again","commit_id":"9583eb13642cc5eed153e8e46680b8a053797f1f"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"68190f3ed4bc565a988a5af75acab74bdb8bde41","unresolved":false,"context_lines":[{"line_number":38,"context_line":"- Force the immediate revocation of a token."},{"line_number":39,"context_line":""},{"line_number":40,"context_line":"- List revoked public key infrastructure (PKI) tokens."},{"line_number":41,"context_line":""},{"line_number":42,"context_line":"The Identity API treats expired tokens as no longer valid tokens."},{"line_number":43,"context_line":"The deployment determines how long expired tokens are stored."},{"line_number":44,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":3,"id":"1a6eadb0_19fac7bd","line":41,"updated":"2016-12-20 15:18:37.000000000","message":"The note should be somewhere in this section here.","commit_id":"6add86193ac9e13b464f8d167408d75350b51491"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"68190f3ed4bc565a988a5af75acab74bdb8bde41","unresolved":false,"context_lines":[{"line_number":356,"context_line":"   - X-Auth-Token: X-Auth-Token"},{"line_number":357,"context_line":""},{"line_number":358,"context_line":""},{"line_number":359,"context_line":"Authentication with scoped authorization to the admin project"},{"line_number":360,"context_line":"\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d\u003d"},{"line_number":361,"context_line":""},{"line_number":362,"context_line":".. rest_method::  POST /v3/auth/tokens"},{"line_number":363,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":3,"id":"1a6eadb0_19a487a4","line":360,"range":{"start_line":359,"start_character":0,"end_line":360,"end_character":61},"updated":"2016-12-20 15:18:37.000000000","message":"Headers should only exist as a one-to-one with APIs.\n\nThis is a note about a configuration option. Let\u0027s move it up to the top section.","commit_id":"6add86193ac9e13b464f8d167408d75350b51491"},{"author":{"_account_id":6482,"name":"Steve Martinelli","email":"s.martinelli@gmail.com","username":"stevemar"},"change_message_id":"68190f3ed4bc565a988a5af75acab74bdb8bde41","unresolved":false,"context_lines":[{"line_number":363,"context_line":""},{"line_number":364,"context_line":"Relationship: ``http://docs.openstack.org/api/openstack-identity/3/rel/auth_tokens``"},{"line_number":365,"context_line":""},{"line_number":366,"context_line":"A pair of configuration options, ``admin_project_domain_name``"},{"line_number":367,"context_line":"and ``admin_project_name``, have been added to the ``[resource]``"},{"line_number":368,"context_line":"section to specify a special ``admin`` project."},{"line_number":369,"context_line":"If these are defined, any scoped token issued for that project"},{"line_number":370,"context_line":"will have an additional identifier ``is_admin_project\u003dtrue`` added to the token."},{"line_number":371,"context_line":"This identifier can then be checked by the policy rules in the policy files"},{"line_number":372,"context_line":"of the services when evaluating access control policy for an API."},{"line_number":373,"context_line":""},{"line_number":374,"context_line":"Normal response codes: 201"},{"line_number":375,"context_line":""}],"source_content_type":"text/x-c++src","patch_set":3,"id":"1a6eadb0_f9a26b4a","line":372,"range":{"start_line":366,"start_character":0,"end_line":372,"end_character":65},"updated":"2016-12-20 15:18:37.000000000","message":"This is a bit hard to read, it\u0027s too wordy in some parts. How about:\n\nIn v3.7 of the Identity API service, two new configuration options were added: ``[resource] admin_project_name`` and ``[resource] admin_project_domain_name``. The options represent the project that only the cloud administratior should be able to access. When an authentication request for a token scoped to the admin project is processed, it will have an additional field in the token ``{is_admin_project: True}``. The additional field can be used when writing policy rules that evaluate access control to APIs.","commit_id":"6add86193ac9e13b464f8d167408d75350b51491"}]}