)]}'
{"keystone/tests/unit/test_v3_assignment.py":[{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"7d52a8d7857c2b4517466f8dc0ef373f0184dbfb","unresolved":false,"context_lines":[{"line_number":2895,"context_line":""},{"line_number":2896,"context_line":"    @utils.wip(\u0027This will fail because of bug #1657865.\u0027)"},{"line_number":2897,"context_line":"    def test_cross_domain_implied_roles(self):"},{"line_number":2898,"context_line":"        self.put(\u0027/roles/%s/implies/%s\u0027 % (self.domainA_role1[\u0027id\u0027],"},{"line_number":2899,"context_line":"                                           self.domainB_role[\u0027id\u0027]),"},{"line_number":2900,"context_line":"                 expected_status\u003dhttp_client.FORBIDDEN)"},{"line_number":2901,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"5a3905b3_e8ed618c","line":2898,"updated":"2017-01-19 19:26:26.000000000","message":"So this technically succeeds when it should be forbidden because roles can\u0027t be implied across domains, right?","commit_id":"9005858a0e1a507716db6ee163c6fbc81d85990e"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"a87ee70179f67f768952db82509437d9ae9da0ac","unresolved":false,"context_lines":[{"line_number":2895,"context_line":""},{"line_number":2896,"context_line":"    @utils.wip(\u0027This will fail because of bug #1657865.\u0027)"},{"line_number":2897,"context_line":"    def test_cross_domain_implied_roles(self):"},{"line_number":2898,"context_line":"        self.put(\u0027/roles/%s/implies/%s\u0027 % (self.domainA_role1[\u0027id\u0027],"},{"line_number":2899,"context_line":"                                           self.domainB_role[\u0027id\u0027]),"},{"line_number":2900,"context_line":"                 expected_status\u003dhttp_client.FORBIDDEN)"},{"line_number":2901,"context_line":""}],"source_content_type":"text/x-python","patch_set":2,"id":"5a3905b3_1ec5823b","line":2898,"in_reply_to":"5a3905b3_e8ed618c","updated":"2017-01-19 22:02:56.000000000","message":"exactly!","commit_id":"9005858a0e1a507716db6ee163c6fbc81d85990e"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c7d181e9b2ec3f58864c1600052c89a76d7edde0","unresolved":false,"context_lines":[{"line_number":2922,"context_line":"            user_id\u003duser[\u0027id\u0027], effective\u003dTrue)"},{"line_number":2923,"context_line":"        self.assertEqual([], assignments)"},{"line_number":2924,"context_line":""},{"line_number":2925,"context_line":"        # This also means we can\u0027t authenticate using the existing assignment"},{"line_number":2926,"context_line":"        auth_body \u003d self.build_authentication_request("},{"line_number":2927,"context_line":"            user_id\u003duser[\u0027id\u0027],"},{"line_number":2928,"context_line":"            password\u003duser[\u0027password\u0027],"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a461143_0c7088db","line":2925,"updated":"2017-01-30 16:22:20.000000000","message":"Just to confirm - this fails because domain specific roles can\u0027t be inferred across domains, right?","commit_id":"5b7b146a7c1de7eacabcf0efa14c5d4fcd7bd902"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"293bfb2b34d45fc01a40a11380819937ef771fd1","unresolved":false,"context_lines":[{"line_number":2922,"context_line":"            user_id\u003duser[\u0027id\u0027], effective\u003dTrue)"},{"line_number":2923,"context_line":"        self.assertEqual([], assignments)"},{"line_number":2924,"context_line":""},{"line_number":2925,"context_line":"        # This also means we can\u0027t authenticate using the existing assignment"},{"line_number":2926,"context_line":"        auth_body \u003d self.build_authentication_request("},{"line_number":2927,"context_line":"            user_id\u003duser[\u0027id\u0027],"},{"line_number":2928,"context_line":"            password\u003duser[\u0027password\u0027],"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a461143_617f4e66","line":2925,"in_reply_to":"3a461143_0c7088db","updated":"2017-01-30 18:36:04.000000000","message":"Yes that is correct","commit_id":"5b7b146a7c1de7eacabcf0efa14c5d4fcd7bd902"},{"author":{"_account_id":17860,"name":"Samuel de Medeiros Queiroz","email":"samueldmq@gmail.com","username":"samueldmq"},"change_message_id":"1a4344981bf5f6afdb065d26acb8fe3b724e1e3c","unresolved":false,"context_lines":[{"line_number":2922,"context_line":"            user_id\u003duser[\u0027id\u0027], effective\u003dTrue)"},{"line_number":2923,"context_line":"        self.assertEqual([], assignments)"},{"line_number":2924,"context_line":""},{"line_number":2925,"context_line":"        # This also means we can\u0027t authenticate using the existing assignment"},{"line_number":2926,"context_line":"        auth_body \u003d self.build_authentication_request("},{"line_number":2927,"context_line":"            user_id\u003duser[\u0027id\u0027],"},{"line_number":2928,"context_line":"            password\u003duser[\u0027password\u0027],"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a461143_c1e56238","line":2925,"in_reply_to":"3a461143_617f4e66","updated":"2017-01-30 18:37:21.000000000","message":"And my understanding was that it should not even be possible to create cross-domain implied roles, which seems like it is possible, as per design (for me should be a bug to create something that is not useful at all).","commit_id":"5b7b146a7c1de7eacabcf0efa14c5d4fcd7bd902"},{"author":{"_account_id":11022,"name":"Rodrigo Duarte Sousa","email":"rodrigodsousa@gmail.com","username":"rodrigods"},"change_message_id":"10ca7c1adbcf21fbcb3a2163cab3c2992b095d6c","unresolved":false,"context_lines":[{"line_number":2922,"context_line":"            user_id\u003duser[\u0027id\u0027], effective\u003dTrue)"},{"line_number":2923,"context_line":"        self.assertEqual([], assignments)"},{"line_number":2924,"context_line":""},{"line_number":2925,"context_line":"        # This also means we can\u0027t authenticate using the existing assignment"},{"line_number":2926,"context_line":"        auth_body \u003d self.build_authentication_request("},{"line_number":2927,"context_line":"            user_id\u003duser[\u0027id\u0027],"},{"line_number":2928,"context_line":"            password\u003duser[\u0027password\u0027],"}],"source_content_type":"text/x-python","patch_set":4,"id":"3a461143_4158928a","line":2925,"in_reply_to":"3a461143_c1e56238","updated":"2017-01-30 18:50:55.000000000","message":"no... this fails because domain roles are not \"effective\" for auth.","commit_id":"5b7b146a7c1de7eacabcf0efa14c5d4fcd7bd902"}]}