)]}'
{"/COMMIT_MSG":[{"author":{"_account_id":8482,"name":"Colleen Murphy","email":"colleen@gazlene.net","username":"krinkle"},"change_message_id":"cd4148c062ad6f3ad467ea0d151bc30d73cebc4b","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"The service provider policies were not taking the default roles work"},{"line_number":10,"context_line":"we did last release into account. This commit changes the default"},{"line_number":11,"context_line":"policies to rely on the ``member`` role to update service providers."},{"line_number":12,"context_line":"Subsequent patches will incorporate:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":" - system admin"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"3f79a3b5_e76ba8b5","line":11,"range":{"start_line":11,"start_character":0,"end_line":11,"end_character":68},"updated":"2018-11-30 14:50:20.000000000","message":"huh? How is updating a service provider a \"member\" level action but creating one is an admin action?","commit_id":"4879245e85fc952e23598ca550baa78df7efa6ee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"8d21ff7c737e6cdd3ad11516428a4df0769c927b","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"The service provider policies were not taking the default roles work"},{"line_number":10,"context_line":"we did last release into account. This commit changes the default"},{"line_number":11,"context_line":"policies to rely on the ``member`` role to update service providers."},{"line_number":12,"context_line":"Subsequent patches will incorporate:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":" - system admin"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"3f79a3b5_95ff77fe","line":11,"range":{"start_line":11,"start_character":0,"end_line":11,"end_character":68},"in_reply_to":"3f79a3b5_b2608c3a","updated":"2018-11-30 18:38:00.000000000","message":"Done\n\nColleen and I worked through this on IRC [0].\n\n[0] http://eavesdrop.openstack.org/irclogs/%23openstack-keystone/%23openstack-keystone.2018-11-30.log.html#t2018-11-30T16:09:16","commit_id":"4879245e85fc952e23598ca550baa78df7efa6ee"},{"author":{"_account_id":5046,"name":"Lance Bragstad","email":"lbragstad@redhat.com","username":"ldbragst"},"change_message_id":"c0dfa648481b4d158c1e963251423417894c18cf","unresolved":false,"context_lines":[{"line_number":8,"context_line":""},{"line_number":9,"context_line":"The service provider policies were not taking the default roles work"},{"line_number":10,"context_line":"we did last release into account. This commit changes the default"},{"line_number":11,"context_line":"policies to rely on the ``member`` role to update service providers."},{"line_number":12,"context_line":"Subsequent patches will incorporate:"},{"line_number":13,"context_line":""},{"line_number":14,"context_line":" - system admin"}],"source_content_type":"text/x-gerrit-commit-message","patch_set":3,"id":"3f79a3b5_b2608c3a","line":11,"range":{"start_line":11,"start_character":0,"end_line":11,"end_character":68},"in_reply_to":"3f79a3b5_e76ba8b5","updated":"2018-11-30 16:08:59.000000000","message":"Good question. The idea was to use member as something in between admin and reader. An admin could:\n\n* create\n* get\n* list\n* update\n* delete\n\nA member could:\n\n* get\n* list\n* update\n\nAnd a reader could:\n\n* get\n* list\n\nIt was really just using the member role to offer more flexibility between the two. Thinking about it from the sense that an admin could delegate update operations to another person, who isn\u0027t an admin.\n\nOpen to debate though, since I don\u0027t think we\u0027ve ever formally declared what roles should do what outside of the default that admins can do all the things.","commit_id":"4879245e85fc952e23598ca550baa78df7efa6ee"}]}