)]}'
{"etc/policy.v3cloudsample.json":[{"author":{"_account_id":1916,"name":"Guang Yee","email":"gyee@suse.com","username":"guang-yee"},"change_message_id":"30c1203a11a35e2eb41f341833a4aa8fede4c1c4","unresolved":false,"context_lines":[{"line_number":41,"context_line":"    \"identity:update_limit\": \"rule:admin_required\","},{"line_number":42,"context_line":"    \"identity:delete_limit\": \"rule:admin_required\","},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"    \"identity:get_domain\": \"rule:cloud_admin or rule:admin_and_matching_domain_id or token.project.domain.id:%(target.domain.id)s\","},{"line_number":45,"context_line":"    \"identity:list_domains\": \"rule:cloud_admin\","},{"line_number":46,"context_line":"    \"identity:create_domain\": \"rule:cloud_admin\","},{"line_number":47,"context_line":"    \"identity:update_domain\": \"rule:cloud_admin\","}],"source_content_type":"application/json","patch_set":10,"id":"bfdaf3ff_ab6d1705","side":"PARENT","line":44,"range":{"start_line":44,"start_character":4,"end_line":44,"end_character":131},"updated":"2019-01-17 05:35:10.000000000","message":"So there\u0027s a subtle difference between this and https://review.openstack.org/#/c/605851/. This rule restricts to \"domain admin\" as oppose to the \"domain user\". In other words, one can scope to a domain with a role other than admin. This change may cause some concern for security folks.","commit_id":"64fb2dbd9b1e679622e6a7a344d2d095d8c91998"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"0fe543bdd3d73408d02f3c27e93b70d89c98a35b","unresolved":false,"context_lines":[{"line_number":41,"context_line":"    \"identity:update_limit\": \"rule:admin_required\","},{"line_number":42,"context_line":"    \"identity:delete_limit\": \"rule:admin_required\","},{"line_number":43,"context_line":""},{"line_number":44,"context_line":"    \"identity:get_domain\": \"rule:cloud_admin or rule:admin_and_matching_domain_id or token.project.domain.id:%(target.domain.id)s\","},{"line_number":45,"context_line":"    \"identity:list_domains\": \"rule:cloud_admin\","},{"line_number":46,"context_line":"    \"identity:create_domain\": \"rule:cloud_admin\","},{"line_number":47,"context_line":"    \"identity:update_domain\": \"rule:cloud_admin\","}],"source_content_type":"application/json","patch_set":10,"id":"9fdfeff1_0b891974","side":"PARENT","line":44,"range":{"start_line":44,"start_character":4,"end_line":44,"end_character":131},"in_reply_to":"bfdaf3ff_ab6d1705","updated":"2019-01-21 20:49:49.000000000","message":"Done","commit_id":"64fb2dbd9b1e679622e6a7a344d2d095d8c91998"}]}