)]}'
{"etc/policy.json":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"5ccba6fe1d011b9165346a782252ba64a563fea9","unresolved":false,"context_lines":[{"line_number":176,"context_line":"    \"identity:list_projects_for_user\": \"\","},{"line_number":177,"context_line":"    \"identity:list_domains_for_user\": \"\","},{"line_number":178,"context_line":""},{"line_number":179,"context_line":"    \"identity:list_revoke_events\": \"rule:admin_required\","},{"line_number":180,"context_line":""},{"line_number":181,"context_line":"    \"identity:create_policy_association_for_endpoint\": \"rule:admin_required\","},{"line_number":182,"context_line":"    \"identity:check_policy_association_for_endpoint\": \"rule:admin_required\","}],"source_content_type":"application/json","patch_set":4,"id":"ba5201f7_8b88d0c6","line":179,"range":{"start_line":179,"start_character":41,"end_line":179,"end_character":55},"updated":"2017-01-06 00:29:13.000000000","message":"rule:service_or_admin would be a better default because it won\u0027t break people running on the default and using PKI, for instance.","commit_id":"1f8bbde6330f24eb790e0f7487d7e037043cee3a"}],"etc/policy.v3cloudsample.json":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"5ccba6fe1d011b9165346a782252ba64a563fea9","unresolved":false,"context_lines":[{"line_number":203,"context_line":"    \"identity:list_projects_for_user\": \"\","},{"line_number":204,"context_line":"    \"identity:list_domains_for_user\": \"\","},{"line_number":205,"context_line":""},{"line_number":206,"context_line":"    \"identity:list_revoke_events\": \"rule:cloud_admin\","},{"line_number":207,"context_line":""},{"line_number":208,"context_line":"    \"identity:create_policy_association_for_endpoint\": \"rule:cloud_admin\","},{"line_number":209,"context_line":"    \"identity:check_policy_association_for_endpoint\": \"rule:cloud_admin\","}],"source_content_type":"application/json","patch_set":4,"id":"ba5201f7_ebbddc68","line":206,"updated":"2017-01-06 00:29:13.000000000","message":"or rule:service_role\n\nsame reasoning as for policy.json","commit_id":"1f8bbde6330f24eb790e0f7487d7e037043cee3a"}],"keystone/tests/unit/test_v3_protection.py":[{"author":{"_account_id":13063,"name":"WEI CHEN","email":"dave.jungler@gmail.com","username":"wei.d.chen"},"change_message_id":"6ecc75c4aef0d9a11730dc122983f6e7735234d2","unresolved":false,"context_lines":[{"line_number":621,"context_line":"        user_token \u003d self.get_requested_token(user_auth)"},{"line_number":622,"context_line":""},{"line_number":623,"context_line":"        self.get(\u0027/OS-REVOKE/events\u0027, token\u003dadmin_token)"},{"line_number":624,"context_line":"        self.get(\u0027/OS-REVOKE/events\u0027, token\u003duser_token, expected_status\u003d401)"},{"line_number":625,"context_line":""},{"line_number":626,"context_line":""},{"line_number":627,"context_line":"class IdentityTestv3CloudPolicySample(test_v3.RestfulTestCase,"}],"source_content_type":"text/x-python","patch_set":6,"id":"ba5201f7_c63c4d95","line":624,"range":{"start_line":624,"start_character":56,"end_line":624,"end_character":75},"updated":"2017-01-09 06:10:12.000000000","message":"Hmm, looks like this should be 403 forbidden instead.\n\nkeystone.tests.unit.test_v3_protection.IdentityTestPolicySample.test_list_revoke_events_is_protected\n\n...\n2017-01-09 05:28:40.608831 |       File \"/home/jenkins/workspace/gate-keystone-python27-db-ubuntu-xenial/.tox/py27/local/lib/python2.7/site-packages/webtest/app.py\", line 671, in _check_status\n2017-01-09 05:28:40.608876 |         \"Bad response: %s (not %s)\", res_status, status)\n2017-01-09 05:28:40.608950 |     webtest.app.AppError: Bad response: 403 Forbidden (not 401)","commit_id":"62a552487b0de23e499b4427f726fc2e2a7943de"}],"releasenotes/notes/bug-1649446-efff94143823755d.yaml":[{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"eae1fa2227af1a357833c18b9dbfcb3f8937df2f","unresolved":false,"context_lines":[{"line_number":4,"context_line":"    [`Bug 1649446 \u003chttps://bugs.launchpad.net/keystone/+bug/1651989\u003e`_]"},{"line_number":5,"context_line":"    The default policy for listing revocation events has changed. Previously,"},{"line_number":6,"context_line":"    any authenticated user could list revocation events; it is now, by default,"},{"line_number":7,"context_line":"    an admin or servicer user only function. This can be changed by modifying"},{"line_number":8,"context_line":"    the policy file being used by keystone."},{"line_number":9,"context_line":"upgrade:"},{"line_number":10,"context_line":"  - |"}],"source_content_type":"text/x-yaml","patch_set":9,"id":"ba5201f7_13baf1c0","line":7,"range":{"start_line":7,"start_character":16,"end_line":7,"end_character":24},"updated":"2017-01-09 20:16:36.000000000","message":"(nit) service","commit_id":"70cd43b2045c7b272246d8195a92f1880d854472"}]}