)]}'
{"keystone/federation/utils.py":[{"author":{"_account_id":2903,"name":"Morgan Fainberg","email":"morgan.fainberg@gmail.com","username":"mdrnstm"},"change_message_id":"0f2dce0fec952c333c02598ab57d9959168e68b9","unresolved":false,"context_lines":[{"line_number":412,"context_line":"                group[\u0027name\u0027], resolve_domain(group[\u0027domain\u0027]))"},{"line_number":413,"context_line":"            yield group_dict[\u0027id\u0027]"},{"line_number":414,"context_line":"        except exception.GroupNotFound:"},{"line_number":415,"context_line":"            LOG.debug(\u0027Group %s has no entry in the backend\u0027,"},{"line_number":416,"context_line":"                      group[\u0027name\u0027])"},{"line_number":417,"context_line":""},{"line_number":418,"context_line":""}],"source_content_type":"text/x-python","patch_set":3,"id":"3f79a3b5_e2ae082e","line":415,"updated":"2018-09-13 15:23:50.000000000","message":"This should be a log warning/info. This should also raise a 401 (might need to change the MappedGroupNotFound exception or need a new one). The concept is that the user is trying to be mapped into a group that doesn\u0027t exist, therefore cannot be authorized.\n\nThe operator should take action to a) create the group, b) work with keycloak install to not emit bogus groups to keystone, c) build a map that takes into account these bogus groups.\n\nI am likewise open to other behaviors, but at first glance, a bogus group should not work. I think the behavior in the mapping should be \"anyoneof\".","commit_id":"30247c9c9ceef5ceeda4bc4f77ce6ee942da19e7"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"4f699288375ffdb61e654de672e7f709943263cf","unresolved":false,"context_lines":[{"line_number":386,"context_line":""},{"line_number":387,"context_line":"    :returns: generator object with group ids"},{"line_number":388,"context_line":""},{"line_number":389,"context_line":"    :raises keystone.exception.MappedGroupNotFound: in case asked group doesn\u0027t"},{"line_number":390,"context_line":"        exist in the backend."},{"line_number":391,"context_line":""},{"line_number":392,"context_line":"    \"\"\""},{"line_number":393,"context_line":"    def resolve_domain(domain):"}],"source_content_type":"text/x-python","patch_set":7,"id":"3f79a3b5_45283f84","line":390,"range":{"start_line":389,"start_character":4,"end_line":390,"end_character":29},"updated":"2018-10-08 13:57:07.000000000","message":"We should update this since it is no longer accurate.","commit_id":"ee46f735359cb5381024a7dfa3f2b297badc6247"}]}